Policy Engineer with Cedar

We are looking for a Policy Engineer (Cedar Implementation) to join our team building an Enterprise Agent Development Platform — a production-grade, cloud-native ecosystem that enables engineering teams to define, orchestrate, deploy, and observe AI agents at scale.

The platform standardizes agent development across the organization using LangGraph and Strands Agents on AWS AgentCore Runtime, providing a single-file developer experience where the platform handles runtime, tooling, observability, and deployment automatically. The initiative spans agent framework design, runtime architecture, marketplace integration, CI/CD automation, and enterprise-grade observability — reducing agent development from months to days while enforcing consistent security, quality, and governance standards.

_This position offers hybrid setup with the flexibility to work from any location in Lithuania, whether it's your home or our dynamic offices in Vilnius and Kaunas._

• Implement a baseline Cedar policy library and establish policy authoring standards for the platform
• Author, test, and maintain Cedar policies to enforce consistent authorization across agent workloads
• Integrate identity providers such as Entra, Okta, and Cognito into the policy framework
• Define and manage ABAC and RBAC models to support enterprise-grade access control
• Configure and operate AWS AgentCore Policy in LOG_ONLY and ENFORCE modes
• Develop Python-based tooling for policy validation, testing, and lifecycle management
• Design parameter-level access control patterns to secure agent interactions
• Map MS Entra claims to policy attributes for fine-grained authorization decisions
• Collaborate with platform, security, and engineering teams to align policies with governance and compliance standards

• 3+ years of experience in security engineering or backend engineering
• Proficiency in Cedar policy language, including authoring and testing
• Expertise in identity provider integration with Entra, Okta, and Cognito
• Skills in policy definition using ABAC or RBAC systems
• Hands-on experience with Open Policy Agent (OPA) or Cedar
• Background in Amazon Web Services, including AWS AgentCore Policy LOG_ONLY and ENFORCE modes
• Competency in Python for policy validation tooling
• Understanding of MS Entra claims mapping and parameter-level access control patterns
• Excellent command of written and spoken English (B2+ level)

Nice to have

• Familiarity with LangGraph tool invocation patterns
• Knowledge of AWS AgentCore Gateway integration

• Engineering Heritage: Best-in-class experts sharing a culture of engineering excellence and tackling complex engineering challenges for over 30 years
• Advanced Tech Stack: Innovative projects where you can apply or enhance your expertise in Cloud, Data, AI, and other emerging technologies
• World-Class Clients: Work closely with 340+ of the Forbes Global 2000 on creating disruptive solutions that make a global impact
• Professional Growth: Exceptional support for career development with comprehensive resources for upskilling or reskilling in pioneering practices
• GenAI Community: Strong AI competencies with 600+ experts across 55+ locations driving GenAI-enabled transformation journeys
• Entrepreneurial Culture: If you're passionate and dedicated to improving business transformation, we provide the support you need to bring your ideas to life
• Hybrid Setup: The flexibility to work from any location in Lithuania, whether it's your home or our dynamic offices in Vilnius and Kaunas
• Other Benefits: Additional vacation and trust days, private health insurance, Employee Stock Purchase Plan and more