Lead Security / Policy Engineer

EPAM Systems is a global leader in AI transformation engineering and integrated consulting, serving Forbes Global 2000 companies and startups. With over thirty years of expertise in custom software, product, and platform engineering, they empower clients to become AI-Native enterprises. This role focuses on an enterprise-grade Agent Development Platform that standardizes agent development using LangGraph and Strands Agents on the AWS AgentCore Runtime.

• 5+ years of experience in cloud security or identity engineering
• Hands-on experience with authorization or policy-as-code for AI agents in production, including Cedar/OPA policy engines
• Expertise in identity-aware authorization, including OAuth 2.0, JWT, token inspection, claims mapping, and OIDC
• Skills in RBAC and ABAC design patterns
• Experience with agent identity, capability/agent-card discovery, and trust boundaries
• Familiarity leading enterprise security review processes, including InfoSec and ARB workflows
• Knowledge of AWS AgentCore Policy and Cedar policy language
• Proficiency in English at a B2+ level

Nice to have:

• Familiarity with Cedar or AWS Cedar open source
• Experience with policy-decision-point patterns, default-deny models, and staged rollout (LOG_ONLY to ENFORCE)
• Early experience with AWS Verified Permissions or AgentCore Policy
• Cloud-native AWS exposure
• Skills in zero-trust architecture design

• Lead the architecture of the policy engine and Cedar policy schema design across the platform
• Define authorization models for agent-to-agent capability advertisement and invocation
• Drive enterprise InfoSec review processes and ensure alignment with ARB requirements
• Establish default-deny authorization patterns for agent interactions
• Integrate identity-aware authorization using OAuth 2.0, JWT, and MS Entra
• Build and maintain policy-as-code patterns to standardize governance
• Oversee audit logging mechanisms for policy decisions and enforcement outcomes
• Guide staged rollout strategies for policy enforcement from monitoring to full enforcement
• Collaborate with engineering teams on trust boundaries between interacting agents

By applying, candidates consent to EPAM Systems (Poland) processing their personal data for recruitment purposes in accordance with the Privacy Policy. Benefits listed are for employees only. The company will contact selected candidates exclusively. Open to working with Contractors under B2B agreements negotiated individually.