Security Engineer with Cedar Policy

DataArt is seeking a skilled Security Engineer to join a collaborative team focused on delivering a centralized authorization framework for enterprise AI services and cloud applications. You will play a key role in implementing and governing policy-based authorization solutions, working closely with identity, security, and platform teams to build secure, scalable access control mechanisms.

Key responsibilities

• Develop and maintain authorization policies using the Cedar policy language.
• Author, test, and validate policy definitions for enterprise applications and AI services.
• Configure and maintain integrations with identity providers such as Microsoft Entra ID, Okta, and Amazon Cognito.
• Develop Python-based tooling for policy validation, testing, and automation.
• Collaborate with cross-functional teams to review authorization requirements and implement policy controls.

Requirements

• 3+ years of experience in security engineering, backend engineering, or a related field.
• Hands-on experience with Open Policy Agent, Cedar, or similar policy-based authorization technologies.
• Strong knowledge of OAuth 2.0, JWT, OpenID Connect, and modern identity architectures.
• Experience defining and managing policies within an ABAC or RBAC authorization framework.
• Proficiency in Python development for automation and backend services.

What we offer

• Up to 26 business days of vacation per year.
• 10 fully paid illness/special days off per year without medical documentation.
• Comprehensive health and life insurance coverage.
• Access to external learning platforms like O’Reilly, LinkedIn Learning, and Udemy.
• Certification reimbursement for professional development.