[Hiring] Senior Policy Engineer @EPAM Systems

Role Description

We are looking for a Senior Policy Engineer to join our Enterprise Agent Development Platform team, a production-grade, cloud-native ecosystem that enables engineering teams to define, orchestrate, deploy, and observe AI agents at scale. The platform standardizes agent development across the organization using LangGraph and Strands Agents on AWS AgentCore Runtime, providing a single-file developer experience where the platform handles runtime, tooling, observability, and deployment automatically. The initiative spans agent framework design, runtime architecture, marketplace integration, CI/CD automation, and enterprise-grade observability, reducing agent development from months to days while enforcing consistent security, quality, and governance standards.

Responsibilities

• Implement baseline Cedar policy library and policy authoring standard
• Author and test Cedar policies covering core access control scenarios
• Configure AWS AgentCore Policy LOG_ONLY and ENFORCE modes across environments
• Build Python-based policy validation tooling to support authoring workflows
• Map MS Entra claims to policy attributes for identity-driven access decisions
• Design and implement parameter-level access control patterns
• Establish policy governance standards for consistent security and quality across agent deployments

Requirements

• 3+ years of experience in security engineering or backend engineering
• Expertise in Cedar policy language, including authoring and testing
• Familiarity with AWS AgentCore Policy LOG_ONLY and ENFORCE modes
• Proficiency in Python for policy validation tooling
• Experience with identity provider integration such as Entra, Okta, or Cognito
• Knowledge of policy definition in ABAC or RBAC systems
• Hands-on background in Open Policy Agent (OPA) or Cedar
• Understanding of MS Entra claims mapping and parameter-level access control patterns
• English proficiency at B2 level or higher

Nice to have

• Familiarity with LangGraph tool invocation patterns
• Knowledge of AWS AgentCore Gateway integration