Intellias
Policy Engineer (Cedar Implementation)
How your CV stacks up
Upload your CV to see how well it fits this job role
?%
Policy Engineer
We are looking for a Policy Engineer to design, implement, and validate fine-grained authorization policies for AI agent platforms and cloud-native services. The role focuses on Cedar policy development, identity provider integrations, policy enforcement, and attribute-based access control. The ideal candidate combines hands-on security engineering experience with strong Python skills and a deep understanding of modern authorization architectures.
About Our Customer
Our customer is a multinational corporation with more than a century of history and offices in over 180 countries. Their most ambitious goal at the time is to introduce a range of Reduced-Risk Products (RRPs). The target audience is more than 1 billion consumers around the globe. IT platform hosts 700+ applications.
What We Offer You in the UK
- AXA private medical insurance
- Life insurance
- Aviva pension scheme: 5% employee + 3% employer contributions
- LinkedIn Learning
- Internal educational activities and blog development program
- Employee recognition with Kudos
- Welcome kits and corporate gifts for special occasions
- Referral programs with monetary bonuses
Reasons to use Rodeo
Start with a chat, not a search bar
Grad scheme, placement, apprenticeship? Not sure what you want yet — that's fine. Your agent talks it through with you and turns "I have no idea" into a shortlist.
It searches the market for you
Every day your agent scans the market matching roles against what actually matters to you, not just keywords on a CV.
Only hits
No noise. No "maybe this fits." Just roles with a clear explanation of why they're right — and where to focus when applying.
Requirements
- 3+ years security engineering or backend engineering
- Cedar policy language — authoring and testing
- Identity provider integration (Entra, Okta, Cognito)
- AWS AgentCore Policy LOG_ONLY / ENFORCE modes
- Policy definition in any ABAC or RBAC system
- Python (policy validation tooling)
- MS Entra claims mapping
- Open Policy Agent (OPA) or Cedar hands-on
- Parameter-level access control patterns
Will Be a Plus
- LangGraph tool invocation patterns
- AWS AgentCore Gateway integration
Responsibilities
- Design, implement, and maintain authorization policies using Cedar policy language.
- Develop and test policy definitions, validation workflows, and policy enforcement mechanisms.
- Configure and manage AWS AgentCore Policy in LOG_ONLY and ENFORCE modes.
- Build Python-based tooling for policy validation, testing, and governance.
- Integrate authorization frameworks with Microsoft Entra ID and other identity providers.
- Design claims mapping and token-based authorization flows using OAuth 2.0 and JWT.
- Implement fine-grained and parameter-level access control models.
- Develop and maintain ABAC and RBAC authorization patterns for platform services and AI agents.
- Partner with platform and security teams to ensure secure access governance across distributed systems.
- Create auditability and traceability mechanisms for authorization decisions.
- Support adoption of policy-as-code practices and authorization best practices.
Get help with your application
Your very own career expert that helps elevate your application to the next level.
About Intellias
At Intellias, where technology takes center stage, people always come before processes. We're dedicated to cultivating a tech-savvy environment that empowers individuals to unlock their true potential and achieve extraordinary results. Our customized benefits not only prioritize your well-being but also charge your professional growth, making this opportunity an ideal match for tech enthusiasts like you.
“It took my CV and asked me questions relevant to understanding what kind of jobs to suggest for me. Suggestions were almost perfect. Jobs were exactly what I’ve been looking for.”
Jessica, London
Skills
Location