Senior Software Engineer, Agent Policy Fabric

This is a fully remote position, open to applicants in California.

📋 Description

• Develop features for policy verification, encompassing signed policy validation, checks for freshness and revocation, rollback protection, and authorization APIs.

• Execute policy projection from the canonical APF policy into runtime-specific rules and adapter constraints.

• Create and test integrations with OpenShell and other runtimes to facilitate policy consumption, runtime context, admission decisions, and audit events.

• Construct fixtures, compatibility tests, negative tests, property tests, and fuzz testing.

• Investigate defects and establish regression coverage.

• Enhance observability, assess performance, troubleshoot reliability issues, and assist in rollout strategies and operational documentation.

• Draft design documents and clarify implementation trade-offs.

• Engage in code and security reviews.

• Collaborate with platform, Identity, and Product Security stakeholders.

• Divide tasks into manageable milestones, communicate dependencies and risks, review code, and disseminate knowledge.

⛳️ Requirements

• Bachelor’s degree or equivalent experience.

• Over 5 years of relevant industry experience in systems software, backend services, distributed systems, security engineering, or policy infrastructure.

• Proficient programming skills in at least one of Rust, Go, C++, or Python.

• Proven experience in delivering maintainable, tested production code.

• Experience in building and delivering service or systems components, including API design, integration, debugging, and error handling.

• Practical experience in implementing security controls, such as authorization checks, signature verification, or credential management.

• Ability to analyze trust boundaries and ensure safe failure behavior.

• Familiarity with Linux, service-to-service interfaces, automated testing, continuous integration, and software release processes.

• Capability to manage engineering tasks through design, implementation, validation, and delivery.

• Proficient in communicating technical trade-offs clearly and collaborating during design and code reviews.

• Experience with policy engines or authorization systems, such as OPA/Rego, Cedar, Zanzibar-style systems, or runtime enforcement frameworks.

• Knowledge of signed artifacts, trust-root distribution, key rotation, revocation, or tools like Sigstore, TUF, or in-toto.

• Familiarity with AI-agent runtimes, sandboxed execution, tool-call governance, MCP-style routing, or credential isolation.

• Experience with protobuf/gRPC, schema evolution, backward-compatible APIs, or cloud and enterprise deployment environments.

• Utilization of property testing, fuzzing, or other adversarial testing methods.

🏝️ Benefits

• Equity.

• Benefits.