Logo for EPAM Systems

Senior Policy Engineer - Cedar Implementation

Role overview

Qualifications

  • 3+ years of experience in security engineering or backend engineering
  • Expertise in Cedar policy language, including authoring and testing
  • Familiarity with AWS AgentCore Policy LOG_ONLY and ENFORCE modes
  • Proficiency in Python for policy validation tooling

Responsibilities

  • Implement baseline Cedar policy library and policy authoring standard
  • Author and test Cedar policies covering core access control scenarios
  • Configure AWS AgentCore Policy LOG_ONLY and ENFORCE modes across environments
  • Build Python-based policy validation tooling to support authoring workflows

Key facts

Hard skills

Other skills

  • Teamwork
  • Communication

About the company

EPAM Systems logo

EPAM Systems

  • IT Services & Consulting
  • XLarge
  • 10,001+
Since 1993, EPAM Systems, Inc. (NYSE: EPAM) has used its software engineering expertise to become a leading global provider of digital engineering, cloud and AI-enabled transformation services, and a leading business and experience consulting partner for global enterprises and ambitious startups. We address our clients’ transformation challenges by fusing EPAM Continuum’s integrated strategy, experience and technology consulting with our 30+ years of engineering execution to speed our clients’ time to market and drive greater value from their innovations and digital investments. We make GenAI real with our AI LLM orchestration, testing and engineering solutions, EPAM DIAL, EPAM EliteA™ and EPAM AI/RUN™, respectively. We deliver globally, but engage locally with our expert teams of consultants, architects, designers and engineers, making the future real for our clients, our partners and our people around the world. We believe the right solutions are the ones that improve people’s lives and fuel competitive advantage for our clients across diverse industries. Our thinking comes to life in the experiences, products and platforms we design and bring to market. Added to the S&P 500 and the Forbes Global 2000 in 2021 and recognized by Glassdoor and Newsweek as a Top 100 Best Workplace, our multidisciplinary teams serve customers across six continents. We are proud to be among the top 15 companies in Information Technology Services in the Fortune 1000 and to be recognized as a leader in the IDC MarketScapes for Worldwide Experience Build Services, Worldwide Experience Design Services and Worldwide Software Engineering Services. Learn more at www.epam.com.

Your match analysis

See how your profile stacks up against this role.

We compared the job requirements to your profile to show where you're strong and where you fall short.

Job description

We are looking for a Senior Policy Engineer to join our Enterprise Agent Development Platform team, a production-grade, cloud-native ecosystem that enables engineering teams to define, orchestrate, deploy, and observe AI agents at scale. The platform standardizes agent development across the organization using LangGraph and Strands Agents on AWS AgentCore Runtime, providing a single-file developer experience where the platform handles runtime, tooling, observability, and deployment automatically. The initiative spans agent framework design, runtime architecture, marketplace integration, CI/CD automation, and enterprise-grade observability, reducing agent development from months to days while enforcing consistent security, quality, and governance standards. Responsibilities Implement baseline Cedar policy library and policy authoring standard Author and test Cedar policies covering core access control scenarios Configure AWS AgentCore Policy LOG_ONLY and ENFORCE modes across environments Build Python-based policy validation tooling to support authoring workflows Map MS Entra claims to policy attributes for identity-driven access decisions Design and implement parameter-level access control patterns Establish policy governance standards for consistent security and quality across agent deployments Requirements 3+ years of experience in security engineering or backend engineering Expertise in Cedar policy language, including authoring and testing Familiarity with AWS AgentCore Policy LOG_ONLY and ENFORCE modes Proficiency in Python for policy validation tooling Experience with identity provider integration such as Entra, Okta, or Cognito Knowledge of policy definition in ABAC or RBAC systems Hands-on background in Open Policy Agent (OPA) or Cedar Understanding of MS Entra claims mapping and parameter-level access control patterns English proficiency at B2 level or higher Nice to have Familiarity with LangGraph tool invocation patterns Knowledge of AWS AgentCore Gateway integration

Related jobs

See all Policy Analyst jobs

Other jobs at EPAM Systems