Lead Security Engineer, Policy & Identity for AI Agents

EPAM Systems; United States; Teletrabalho; USD 150 000 - 210 000; Tempo integral

Resumo da oferta

EPAM Systems Inc seeks a Lead Security / Policy Engineer to architect the policy engine, Cedar schema, and InfoSec review processes for an enterprise-grade Agent Development Platform built on LangGraph and Strands Agents on AWS.

The role centers on authorization at the agent boundary, ensuring secure advertisement and invocation of capabilities while enforcing governance and default-deny patterns. Strong RBAC/ABAC, OAuth/JWT/OIDC expertise is required.

Qualificações

• 5+ years in cloud security or identity engineering.
• Experience with authorization or policy-as-code for AI agents (Cedar/OPA).
• Identity-aware authorization with OAuth 2.0, JWT, and OIDC.
• RBAC and ABAC design patterns.
• Policy-as-code experience (Cedar, OPA) or A2A protocol depth.
• Experience leading enterprise security review processes (InfoSec, ARB).
• Knowledge of AWS AgentCore Policy and Cedar policy language.
• English proficiency at B2+ level.
• Familiarity with Cedar or AWS Cedar.
• Policy-decision-point pattern experience; staged rollout.

Responsabilidades

• Lead the architecture of the policy engine and Cedar schema design across the platform.
• Define authorization models for agent-to-agent capability advertisement and invocation.
• Drive enterprise InfoSec review processes and ARB workflows.
• Establish default-deny authorization patterns for agent interactions.
• Integrate identity-aware authorization using OAuth 2.0, JWT, and OIDC.
• Build and maintain policy-as-code patterns to standardize governance.
• Oversee audit logging mechanisms for policy decisions and enforcement outcomes.
• Guide staged rollout strategies for policy enforcement from monitoring to enforcement.
• Collaborate with engineering teams to reason about trust boundaries between interacting agents.

Conhecimentos

Cloud security

Identity engineering

RBAC/ABAC design

Policy-as-code

OAuth 2.0

JWT inspection

OIDC

Zero-trust

Agent-to-agent auth

ARB workflows

InfoSec review

Ferramentas

Cedar

OPA

AWS

AgentCore Policy

Descrição da oferta de emprego

EPAM Systems Inc seeks a Lead Security / Policy Engineer to architect the policy engine, Cedar schema, and InfoSec review processes for an enterprise-grade Agent Development Platform built on LangGraph and Strands Agents on AWS.

The role centers on authorization at the agent boundary, ensuring secure advertisement and invocation of capabilities while enforcing governance and default-deny patterns. Strong RBAC/ABAC, OAuth/JWT/OIDC expertise is required.