Description

Design and implement fine-grained authorization frameworks and policy management for a large enterprise environment.

This role is on-site.

Responsibilities

• Develop and maintain a library of Rego policies, focusing on code reuse and organization.
• Manage the full policy lifecycle, including storage, versioning, deployment, and deprecation.
• Automate deployment pipelines using GitHub Actions and Terraform.
• Implement OPA in Kubernetes environments, specifically using AKS, and optimize performance via gRPC.

Required Skills

• 3-5 years of implementation experience with Open Policy Agent (OPA) and Rego.
• Experience with Fine-Grained Authorization (FGA) and entitlement management.
• Hands-on experience with Kubernetes Admission Control and running OPA in k8s.
• Proficiency with Terraform for configuration validation and infrastructure.
• Experience with APIM, Envoy, or Kong ingress control.
• Knowledge of Web Assembly and OPA bundle management.
• Ability to integrate external data sources and manage OPA via API.
• 8+ years of experience with programming languages including Java, Python, or Go.
• 8+ years of experience in Identity (authN/Z) and Security.

Preferred Skills

• 5+ years implementing fine-grained authorization using COTS products like PlainID, Okta, or Sytra.
• Experience with observability integration using Dynatrace.

Key Skills

Education

ANY GRADUATE