Security Engineer: Authorization Policy & Identity

Jobo; United States; Remote; USD 110,000 - 160,000; Full time

Job summary

DataArt Poland is looking for a Security Engineer to join a project focused on delivering a centralized authorization framework for enterprise AI services and cloud applications. You will work within a team of 10-20 professionals to build secure policy enforcement, identity integration, and governance capabilities for a UK financial services client.

You will develop Cedar-based policies, ABAC/RBAC models, and Python tooling for policy validation, testing, and automation, while collaborating with

Qualifications

• 3+ years of experience in security engineering, backend engineering, or related field.
• Hands-on experience with policy-based authorization technologies (OPA, Cedar or similar).
• Strong knowledge of OAuth 2.0, JWT, OpenID Connect and modern identity architectures.
• Experience defining policies within ABAC or RBAC frameworks.
• Proficiency in Python for automation, validation, or backend services.

Responsibilities

• Develop and maintain authorization policies using Cedar.
• Implement and support ABAC/RBAC access control models.
• Configure integrations with identity providers (Microsoft Entra ID, Okta, Cognito).
• Develop Python-based tooling for policy validation, testing, and automation.
• Collaborate with security and engineering teams to review requirements and implement policy controls.

Skills

Security engineering

Policy-based authorization

OAuth 2.0 / OIDC

Python development

Identity architectures

Tools

Open Policy Agent

Cedar

Microsoft Entra ID

Okta

Amazon Cognito

Python

Job description

DataArt Poland is looking for a Security Engineer to join a project focused on delivering a centralized authorization framework for enterprise AI services and cloud applications. You will work within a team of 10-20 professionals to build secure policy enforcement, identity integration, and governance capabilities for a UK financial services client.

You will develop Cedar-based policies, ABAC/RBAC models, and Python tooling for policy validation, testing, and automation, while collaborating with