Policy Engineer

Over 20 years of market experience, Intellias brings together technologists, creators, and innovators across Europe, North and Latin America, and the Middle East. Join our international team and help build secure, next-generation digital platforms for a global enterprise.

We are looking for a Policy Engineer to design, implement, and validate fine-grained authorization policies for AI agent platforms and cloud-native services. This role focuses on modern authorization architectures, policy-as-code, identity integrations, and secure access governance. You will work closely with platform and security teams to ensure scalable and compliant authorization across distributed systems.

Project Overview

Our customer is a multinational corporation with more than a century of history and operations in over 180 countries. Intellias supports the client in developing a comprehensive Digital Engineering Enterprise Platform that accelerates software delivery by providing engineering teams with cloud-native services, security frameworks, and development best practices.

As part of the Core Architecture Team, you will contribute to building secure authorization mechanisms for enterprise platforms, cloud services, and AI agent-based solutions.

Responsibilities

• Design, implement, and maintain authorization policies using Cedar policy language.

• Develop, validate, and test policy definitions and enforcement mechanisms.

• Configure and manage AWS AgentCore Policy in LOG_ONLY and ENFORCE modes.

• Build Python-based tooling for policy validation, testing, governance, and automation.

• Integrate authorization frameworks with Microsoft Entra ID and other identity providers.

• Design claims mapping and token-based authorization flows using OAuth 2.0 and JWT.

• Implement fine-grained, parameter-level access control models.

• Develop and maintain ABAC and RBAC authorization patterns.

• Partner with platform and security teams to ensure secure governance across distributed systems.

• Create auditability and traceability mechanisms for authorization decisions.

• Promote policy-as-code practices and authorization best practices across engineering teams.

Requirements

Must Have

• 3+ years of experience in Security Engineering or Backend Engineering.

• Hands-on experience with Cedar policy language, including policy authoring and testing.

• Experience working with AWS AgentCore Policy, including LOG_ONLY and ENFORCE modes.

• Strong Python programming skills, including developing policy validation and testing tools.

• Experience integrating identity providers such as Microsoft Entra ID, Okta, or Amazon Cognito.

• Experience with Microsoft Entra claims mapping and token-based authorization.

• Solid understanding of OAuth 2.0, JWT, and modern authorization architectures.

• Experience implementing ABAC and/or RBAC authorization models.

• Knowledge of parameter-level access control patterns.

• Hands-on experience with Open Policy Agent (OPA) or similar policy-as-code frameworks.

• Strong communication skills and the ability to collaborate in cross-functional teams.

Nice to Have

• Experience with LangGraph tool invocation patterns.

• Experience integrating with AWS AgentCore Gateway.

• Experience working with AI agent platforms or cloud-native AI services.

• Understanding of cloud security governance and compliance best practices.

Why Join Intellias?

• Work on cutting-edge AI and cloud-native security solutions.

• Join a strategic Core Architecture Team shaping enterprise-scale platforms.

• Collaborate with experienced architects, security engineers, and platform specialists.

• Influence modern authorization, identity, and policy-as-code practices.

• Be part of an international engineering environment focused on innovation, technical excellence, and continuous learning.