Security Engineer with Cedar Policy

DataArt Poland is looking for a Security Engineer to join a project focused on delivering a centralized authorization framework for enterprise AI services and cloud applications. You will work within a team of 10-20 professionals to build secure policy enforcement, identity integration, and governance capabilities for a UK financial services client.

Key responsibilities

• Develop and maintain authorization policies using the Cedar policy language.
• Implement and support access control models using attribute-based and role-based authorization approaches.
• Configure and maintain integrations with identity providers such as Microsoft Entra ID, Okta, and Amazon Cognito.
• Develop Python-based tooling for policy validation, testing, and automation.
• Collaborate with security and engineering teams to review authorization requirements and implement policy controls.

Requirements

• 3+ years of experience in security engineering, backend engineering, or a related field.
• Hands-on experience with Open Policy Agent, Cedar, or similar policy-based authorization technologies.
• Strong knowledge of OAuth 2.0, JWT, OpenID Connect, and modern identity architectures.
• Experience defining and managing policies within an ABAC or RBAC authorization framework.
• Proficiency in Python development for automation, validation, or backend services.

What we offer

• Substantive support from experienced technological leaders.
• Dedicated time for the development of your own ideas.
• Influence on the technological solutions applied and the product development process.
• Opportunity to develop code from scratch in an agile environment.