Policy Engineer
Summary
Red Global is hiring a Policy Engineer (B2B day-rate, Warszawa/remote) to build and maintain the Cedar authorization policy library for a client's Enterprise Agent Development Platform — defining agent-to-agent access controls, implementing AWS AgentCore policies in LOG_ONLY/ENFORCE modes, and building Python-based policy validation tools.
Wynagrodzenie
B2B: 350 – 450 EUR / dzień netto
We’re looking for a Policy Engineer to build and maintain the baseline Cedar policy library and policy authoring standards for our client's Enterprise Agent Development Platform.
Responsibilities
Develop and test Cedar authorization policies.
Define access controls for agent-to-agent interactions, capabilities, and tool invocations.
Implement AWS AgentCore policies in LOG_ONLY and ENFORCE modes.
Build Python-based policy validation and testing tools.
Integrate identity claims from Microsoft Entra ID and implement parameter-level access controls.
Requirements
3+ years of security or backend engineering experience.
Knowledge of OAuth 2.0, JWT, OIDC, RBAC, or ABAC.
Experience with policy definition or agent-to-agent (A2A) protocols.
Python proficiency and a strong understanding of authorization boundaries.
Nice to have: Cedar, OPA, AWS AgentCore, LangGraph, or AWS AgentCore Gateway experience.
No prior Cedar experience required — strong authorization fundamentals are what matter most.