Senior Software Engineer, Agent Policy Fabric

The Agentic Safety Engineering team is building Agent Policy Fabric (APF), an enterprise governance layer for AI agents. APF combines signed policy, runtime verification, policy projection, credential mediation, and audit records to help govern the actions agents take across enterprise systems. We are looking for a Senior Software Engineer to help turn the APF proof of concept into diligent production software. You will build, implement, test, and operate features in policy verification, runtime integration, or conformance testing. Working with experienced platform and security engineers, you will own a defined feature or subsystem and help ensure that policy decisions are accurate, integrations are reliable, and failures are handled safely! Join us! What You'll Be Doing: • Build policy-verification features: Implement components of the Runtime Policy Verifier and authorization APIs, including signed policy validation, freshness and revocation checks, rollback protection, and binding decisions to the correct subject and runtime context, following reviewed security contracts. • Implement policy projection: Translate canonical APF policy into runtime-specific rules and adapter constraints. Handle unsupported policies and partial updates safely so runtimes admit work only when the required policy has been accepted. • Develop runtime integrations: Work with OpenShell and other runtime engineers to implement and test agreed interfaces for policy consumption, runtime context, admission decisions, and audit events. Document interface behavior and raise gaps or conflicting assumptions for resolution. • Strengthen correctness and conformance: Build fixtures, compatibility tests, negative tests, and property or fuzz tests that exercise policy behavior, integration boundaries, and failure paths. Investigate defects and turn findings into regression coverage. • Deliver production-ready components: Add observability, measure performance, debug reliability issues, and contribute to rollout plans and operational documentation for the components you own. • Contribute technical judgment: Write focused design documents, explain implementation tradeoffs, participate in code and security reviews, and work with platform, Identity, and Product Security partners to resolve issues within your scope. • Help the team deliver: Break work into achievable turning points, communicate dependencies and risks, review code, and share knowledge with other engineers. What We Need To See: • Bachelor's degree or equivalent experience, with 5+ years of relevant industry experience in systems software, backend services, distributed systems, security engineering, or policy infrastructure. • Strong programming skills in at least one of Rust, Go, C++, or Python, with experience delivering maintainable, tested production code. • Experience building and delivering services or systems components, including API design, integration, debugging, and error handling. • Practical experience implementing security controls, such as authorization checks, signature verification, or credential handling, and the ability to reason about trust boundaries and safe failure behavior. • Working knowledge of Linux, service-to-service interfaces, automated testing, CI, and software release workflows. • Ability to own engineering work through design, implementation, validation, and delivery; communicate technical tradeoffs clearly; and collaborate effectively through design and code reviews. Ways to Stand Out from the Crowd: • Experience with policy engines or authorization systems such as OPA/Rego, Cedar, Zanzibar-style systems, or runtime enforcement frameworks. • Experience with signed artifacts, trust-root distribution, key rotation, revocation, or tools such as Sigstore, TU