Staff Policy Engineer, Agent Authorization

The role

Authorization is the product. You own the model that turns a sponsor's intent into a decision an agent can act on — the scopes, the constraints, the expiry, and the evaluation path that runs before any action clears.

You will work across policy language design, the evaluation engine, and the audit trail that makes every decision attributable after the fact.

What you will do

Define the policy primitives: scopes, obligations, and time-boxed grants that agents and humans are both bound by.

Build the evaluator that answers allow/deny in single-digit milliseconds under production load.

Publish falsifiers for your own model — the inputs that should be denied and the proof they are.

Partner with governance counsel to keep the policy model defensible to a regulator.

What we look for

Deep experience with authorization systems: policy engines, capability models, or attribute-based access control at scale.

You reason about correctness first and can explain a deny decision to a non-engineer.

You have shipped systems where a wrong answer has real consequences.