Senior Software Engineer, Agent Policy Fabric

What you'll do

• Implement components of the Runtime Policy Verifier and authorization APIs including signed policy validation and revocation checks.
• Translate canonical APF policies into runtime-specific rules and adapter constraints.
• Develop and test interfaces for policy consumption, runtime context, admission decisions, and audit events.
• Build fixtures, compatibility tests, and fuzz tests to exercise policy behavior and failure paths.
• Add observability, measure performance, and debug reliability issues for production-ready components.
• Write design documents and participate in code and security reviews to resolve technical issues.
• Break down complex work into achievable turning points and communicate dependencies and risks.

What we're looking for

• Bachelor's degree or equivalent experience.
• 5+ years of relevant industry experience in systems software, backend services, distributed systems, security engineering, or policy infrastructure.
• Strong programming skills in at least one of Rust, Go, C++, or Python.
• Experience building and delivering services or systems components, including API design, integration, debugging, and error handling.
• Practical experience implementing security controls such as authorization checks, signature verification, or credential handling.
• Working knowledge of Linux, service-to-service interfaces, automated testing, CI, and software release workflows.
• Experience with policy engines or authorization systems such as OPA/Rego, Cedar, or Zanzibar-style systems (preferred).
• Experience with signed artifacts, trust-root distribution, key rotation, revocation, or tools such as Sigstore, TUF, or in-toto (preferred).