We are looking for a Policy Engineer (Cedar Implementation) to join our team building an Enterprise Agent Development Platform — a production-grade, cloud-native ecosystem that enables engineering teams to define, orchestrate, deploy, and observe AI agents at scale.
The platform standardizes agent development across the organization using LangGraph and Strands Agents on AWS AgentCore Runtime, providing a single-file developer experience where the platform handles runtime, tooling, observability, and deployment automatically. The initiative spans agent framework design, runtime architecture, marketplace integration, CI/CD automation, and enterprise-grade observability — reducing agent development from months to days while enforcing consistent security, quality, and governance standards.
_This position offers hybrid setup with the flexibility to work from any location in Lithuania, whether it's your home or our dynamic offices in Vilnius and Kaunas._
- Implement a baseline Cedar policy library and establish policy authoring standards for the platform
- Author, test, and maintain Cedar policies to enforce consistent authorization across agent workloads
- Integrate identity providers such as Entra, Okta, and Cognito into the policy framework
- Define and manage ABAC and RBAC models to support enterprise-grade access control
- Configure and operate AWS AgentCore Policy in LOG_ONLY and ENFORCE modes
- Develop Python-based tooling for policy validation, testing, and lifecycle management
- Design parameter-level access control patterns to secure agent interactions
- Map MS Entra claims to policy attributes for fine-grained authorization decisions
- Collaborate with platform, security, and engineering teams to align policies with governance and compliance standards
