Senior Security Engineer with Cedar Policy

Location: Armenia, Bulgaria, Cyprus, Georgia, Kazakhstan, Latvia, Poland, Romania, Serbia, or Ukraine

Company

The posting does not provide a company description.

What you will do

• Design and implement Cedar-based authorization frameworks and policy-as-code solutions for enterprise platforms and AI services.
• Define and enforce attribute-based access control, default-deny models, and secure authorization patterns across applications and cloud environments.
• Integrate authorization services with Microsoft Entra ID, OAuth 2.0, JWT, and OpenID Connect identity systems.
• Build audit logging mechanisms, map identity claims and token attributes to policies, and support authorization decision traceability.
• Collaborate with security architecture, governance, platform, and engineering teams on security reviews, compliance, standards, and documentation.
• Support zero trust initiatives and recommend improvements to authorization, governance, and cloud security controls.

Requirements

• 5+ years of experience in cloud security engineering, identity engineering, or a related security field.
• Hands-on experience designing and implementing attribute-based access control solutions.
• Strong understanding of OAuth 2.0, JWT, OpenID Connect, and identity federation concepts.
• Experience inspecting authentication tokens and mapping claims to authorization policies.
• Experience designing, implementing, or governing policy-based access control systems.
• Knowledge of Cedar policy language concepts, including principals, actions, resources, and conditions.
• Experience with policy-as-code methodologies and authorization frameworks.
• Experience participating in enterprise security reviews, architecture review boards, or information security governance processes.
• Understanding of secure audit logging and authorization decision traceability, plus strong written and verbal communication skills.

Nice to have

• Experience with AWS Cedar or other Cedar-based authorization frameworks.
• Experience with AWS Verified Permissions or AWS AgentCore Policy services.
• Knowledge of zero trust architecture principles and implementation patterns.
• Experience supporting enterprise AI platforms and authorization governance initiatives.
• Exposure to cloud-native security services and modern identity architectures.
• Experience building scalable authorization platforms for distributed systems.

Culture & Benefits

• Work with a medium-sized team of 10–20 people.
• Collaborate with security engineers, identity specialists, cloud architects, platform engineers, governance stakeholders, security review boards, and engineering teams.
• Follow a policy-as-code approach focused on secure and scalable solutions.