DataArt

Security Engineer with Cedar Policy

18k - 20k PLN18 000 - 20 000 PLN/ mies./ mies.B2BB2B (netto)

14k - 16.5k PLN14 000 - 16 500 PLN/ mies./ mies.UoPUmowa o pracę (brutto)

MidZdalnie·WrocławFull-time·B2B·Umowa o pracę

#469408·Dodano 7 dni temu·0

Źródło: justjoin.it

Aplikuj teraz

Tech Stack / Keywords

AWS AgentCore RegistryPythonCedarOAuth 2.0OpenID

Podsumowanie oferty

The role focuses on implementing and governing policy-based authorization for enterprise AI and cloud platforms. You will develop authorization policies, integrate identity providers, and build secure access controls using Cedar, AWS AgentCore Policy, and Python.

Wymagania

Requirements:

3+ years of experience in security engineering, backend engineering, or a related field.
Hands-on experience integrating enterprise identity providers, including Microsoft Entra ID, Okta, or Amazon Cognito.
Experience defining and managing policies within an ABAC or RBAC authorization framework.
Hands-on experience with Open Policy Agent, Cedar, or similar policy-based authorization technologies.
Knowledge of OAuth 2.0, JWT, OpenID Connect, and modern identity architectures.
Experience working with claims mapping and token-based authorization models.
Understanding of secure authorization design principles and policy lifecycle management.
Experience with Python development for automation, validation, or backend services.
Strong analytical and problem-solving skills.
Good written and verbal communication skills.

Nice to have:

Experience with LangGraph tool invocation patterns.
Experience integrating with AWS AgentCore Gateway.
Knowledge of enterprise AI platform architecture and governance principles.
Experience implementing policy-as-code methodologies.
Familiarity with cloud-native security services and authorization platforms.
Exposure to audit logging and compliance reporting requirements.

Obowiązki

Responsibilities:

Develop and maintain authorization policies using the Cedar policy language.
Author, test, and validate policy definitions for enterprise applications and AI services.
Implement and support access control models using attribute-based and role-based authorization approaches.
Configure and maintain integrations with identity providers such as Microsoft Entra ID, Okta, and Amazon Cognito.
Map identity claims and token attributes to authorization decisions and policy rules.
Support implementation of AWS AgentCore Policy in LOG_ONLY and ENFORCE modes.
Develop Python tooling for policy validation, testing, and automation.
Design and implement parameter-level access control patterns for secure tool and service interactions.
Collaborate with security, platform, and engineering teams to review authorization requirements and implement policy controls.
Contribute to audit logging and authorization decision traceability practices.
Support security reviews and help maintain authorization governance standards.

Benefity

Up to 26 business days of vacation per year.
10 fully paid illness/special days off per year, with no medical papers needed, for all contract types.
Health and life insurance (Luxmed).
MyBenefit platform with a Multisport option.
Internal psychological support service.
English language classes from the first working day.
Access to external learning platforms: O’Reilly, LinkedIn Learning, and Udemy, plus a catalog of internal training.
Tech Skills Mentoring Program.
Opportunities to develop as a public speaker, mentor, or technical interviewer.
Certification reimbursement (AWS, GCP, Microsoft, etc.).

Płatne święta

Ubezpieczenie

Opieka zdrowotna

Karta sportowa

Kursy językowe

Szkolenia wewnętrzne

Dofinansowanie szkoleń

DataArt

18 aktywnych ofert

Zobacz wszystkie oferty

Aplikuj teraz