Security Engineer with Cedar Policy

Jobo; United States; Remote; USD 110,000 - 160,000; Full time

Job summary

DataArt Poland is looking for a Security Engineer to join a project focused on delivering a centralized authorization framework for enterprise AI services and cloud applications. You will work within a team of 10-20 professionals to build secure policy enforcement, identity integration, and governance capabilities for a UK financial services client.

You will develop Cedar-based policies, ABAC/RBAC models, and Python tooling for policy validation, testing, and automation, while collaborating with

Qualifications

• 3+ years of experience in security engineering, backend engineering, or related field.
• Hands-on experience with policy-based authorization technologies (OPA, Cedar or similar).
• Strong knowledge of OAuth 2.0, JWT, OpenID Connect and modern identity architectures.
• Experience defining policies within ABAC or RBAC frameworks.
• Proficiency in Python for automation, validation, or backend services.

Responsibilities

• Develop and maintain authorization policies using Cedar.
• Implement and support ABAC/RBAC access control models.
• Configure integrations with identity providers (Microsoft Entra ID, Okta, Cognito).
• Develop Python-based tooling for policy validation, testing, and automation.
• Collaborate with security and engineering teams to review requirements and implement policy controls.

Skills

Security engineering

Policy-based authorization

OAuth 2.0 / OIDC

Python development

Identity architectures

Tools

Open Policy Agent

Cedar

Microsoft Entra ID

Okta

Amazon Cognito

Python

Job description

DataArt Poland is looking for a Security Engineer to join a project focused on delivering a centralized authorization framework for enterprise AI services and cloud applications. You will work within a team of 10-20 professionals to build secure policy enforcement, identity integration, and governance capabilities for a UK financial services client.

Key responsibilities

• Develop and maintain authorization policies using the Cedar policy language.
• Implement and support access control models using attribute-based and role-based authorization approaches.
• Configure and maintain integrations with identity providers such as Microsoft Entra ID, Okta, and Amazon Cognito.
• Develop Python-based tooling for policy validation, testing, and automation.
• Collaborate with security and engineering teams to review authorization requirements and implement policy controls.

Requirements

• 3+ years of experience in security engineering, backend engineering, or a related field.
• Hands-on experience with Open Policy Agent, Cedar, or similar policy-based authorization technologies.
• Strong knowledge of OAuth 2.0, JWT, OpenID Connect, and modern identity architectures.
• Experience defining and managing policies within an ABAC or RBAC authorization framework.
• Proficiency in Python development for automation, validation, or backend services.

What we offer

• Substantive support from experienced technological leaders.
• Dedicated time for the development of your own ideas.
• Influence on the technological solutions applied and the product development process.
• Opportunity to develop code from scratch in an agile environment.