Security & Policy Engineer

We are looking for a Security / Policy Engineer to design and implement authorization models for AI agents and cloud-native platforms. The role focuses on AWS AgentCore Policy (Cedar), policy-as-code, OAuth/JWT-based authorization, and zero-trust security architecture. The ideal candidate has handson experience with cloud security, identity engineering, ABAC design, and enterprisegrade access control systems. Project OverviewOur customer is a multinational corporation with more than a century of history and offices in over 180 countries. Their most ambitious goal at the time is to introduce a range of ReducedRisk Products (RRPs). The target audience is more than 1billion consumers around the globe. IT platform hosts 700+ applications. Intellia's mission is to help the client with the engineering of a comprehensive software ecosystem for a gamechanging IoT product on the margin of innovative consumer experience and cuttingedge technology. Our teams are involved in the engineering of core platform components for bestinclass eCommerce, Digital Marketing and IoT solutions. As an Engineer, you will become a part of Core Architecture Team and be responsible for the architecture, implementation of best practices in our Digital Engineering Enterprise Platform. The Platform is a set of services and internet applications that accelerate the development and delivery of software applications by taking care of common SDLC challenges. The Platform provides access and consumption for engineering teams to a set of services, technologies, practices for their development and for operating their application, ensuring a set of compliance and best practices. RequirementsCedar policy language (principals, actions, resources, conditions)Defaultdeny authorization modelsAudit logging for policy decisionsExperience5+ years cloud security or identity engineeringAttributebased access control (ABAC) designOAuth 2.0 / JWT token inspection and claims mappingEnterprise security review (InfoSec, ARB processes)Will be a plusAWS Verified Permissions or AgentCore Policy early experienceResponsibilitiesDesign and implement authorization policies using Cedar and AWS AgentCore Policy.Develop and maintain policy-as-code frameworks for cloudnative and AIagent platforms.Build and govern AttributeBased Access Control (ABAC) models following leastprivilege and defaultdeny principles.Integrate authorization systems with OAuth 2.0, JWT, and Microsoft Entra ID.Define and maintain principals, resources, actions, and conditional access policies.Implement audit logging and traceability for policy evaluation and access decisions.Partner with security, architecture, and platform teams to support enterprise security reviews and governance processes.Contribute to zerotrust security architecture and authorization strategy across distributed systems.Evaluate and adopt emerging AWS authorization technologies, including Cedar and AWS Verified Permissions. .