Senior Policy Engineer – Cedar Implementation

About the role

We are seeking a Senior Policy Engineer to join our Enterprise Agent Development Platform team. You will work on a cloud‑native ecosystem that standardises AI agent development, handling runtime, tooling, observability and deployment on AWS AgentCore Runtime.

Key responsibilities

• Implement a baseline Cedar policy library and authoring standard.
• Author and test Cedar policies for core access‑control scenarios.
• Configure AWS AgentCore Policy LOG_ONLY and ENFORCE modes across environments.
• Build Python‑based validation tooling to support policy authoring workflows.
• Map Microsoft Entra claims to policy attributes for identity‑driven decisions.
• Design and implement parameter‑level access‑control patterns.
• Establish governance standards to ensure consistent security and quality across agent deployments.

Required profile

• 3+ years of experience in security engineering or backend engineering.
• Expertise in Cedar policy language, including authoring and testing.
• Familiarity with AWS AgentCore Policy LOG_ONLY and ENFORCE modes.
• Proficiency in Python for building validation tools.
• Experience integrating identity providers such as Entra, Okta or Cognito.
• Knowledge of ABAC or RBAC policy definitions.
• Hands‑on background with Open Policy Agent (OPA) or Cedar.
• Understanding of MS Entra claims mapping and parameter‑level access control.
• English proficiency at B2 level or higher.

Required skills

• Cedar policy language
• AWS AgentCore Policy (LOG_ONLY, ENFORCE)
• Python
• Identity provider integration (Entra, Okta, Cognito)
• ABAC
• RBAC
• Open Policy Agent (OPA)

What we offer

• Remote work from anywhere in Georgia (home, offices in Tbilisi, Batumi or coworking in Kutaisi).
• Opportunity to work abroad up to two months per year.
• Relocation possibilities across 55+ countries.
• Corporate and social events, leadership development and well‑being programs.
• Certification support for GCP, Azure and AWS.
• Unlimited access to EPAM’s internal learning platform and free English classes.
• Employee Stock Purchase Plan and referral bonuses.
• Comprehensive medical and family care package plus five trust days per year.