Security Engineer with Cedar Policy

Location: Armenia, Bulgaria, Cyprus, Georgia, Kazakhstan, Latvia, Poland, Romania, Serbia, or Ukraine

Company

hirify.global.

What you will do

• Develop, maintain, test, and validate Cedar authorization policies for enterprise applications and AI services.
• Implement ABAC and RBAC access-control models, including parameter-level controls for secure tool and service interactions.
• Configure identity-provider integrations with Microsoft Entra ID, Okta, and Amazon Cognito, mapping claims and token attributes to authorization decisions.
• Support AWS AgentCore Policy in LOG_ONLY and ENFORCE modes and develop Python tooling for policy validation, testing, and automation.
• Collaborate with security, platform, backend, architecture, and governance specialists on authorization requirements and policy controls.
• Contribute to audit logging, authorization decision traceability, security reviews, and governance standards.

Requirements

• 3+ years of experience in security engineering, backend engineering, or a related field.
• Hands-on experience integrating enterprise identity providers, including Microsoft Entra ID, Okta, or Amazon Cognito.
• Experience defining and managing policies within an ABAC or RBAC authorization framework.
• Hands-on experience with Open Policy Agent, Cedar, or similar policy-based authorization technologies.
• Knowledge of OAuth 2.0, JWT, OpenID Connect, and modern identity architectures.
• Experience with claims mapping and token-based authorization models.
• Understanding of secure authorization design principles and policy lifecycle management.
• Experience with Python development for automation, validation, or backend services.
• Strong analytical and problem-solving skills, plus good written and verbal communication skills.

Nice to have

• Experience with LangGraph tool invocation patterns.
• Experience integrating with AWS AgentCore Gateway.
• Knowledge of enterprise AI platform architecture and governance principles.
• Experience implementing policy-as-code methodologies.
• Familiarity with cloud-native security services and authorization platforms.
• Exposure to audit logging and compliance reporting requirements.

Culture & Benefits

• Work in a medium-sized team of 10–20 people.
• Collaborate with security engineers, backend developers, platform engineers, architects, and governance specialists.
• Use a collaborative development approach focused on policy as code, automation, secure design practices, and continuous improvement.