Policy - AS - Code

We are hiring Policy-as-Code (IAM / OPA / Rego/ Open Policy Agent - Banking / Financial services domain) Location :Hybrid 2-3 days in Northampton Office

• Should have prior enterprise-scale experience in authorization engineering, Policy-as-Code, and distributed access control models.
• Designing, developing, and optimizing high-performance authorization policies, PDP integrations, and audit/evidence capabilities for fine-grained access management.
• Open Policy Agent (OPA), Rego language, policy bundle management (signing/distribution), and design of RBAC, ABAC, and ReBAC architectures.
• Java, Spring Boot, Apache Kafka (event-driven systems), Docker, GitLab CI/CD, and Test-Driven Development (TDD) principles.
• Knowledge of PDP/PEP/PIP components, fail-closed patterns, Vault, API Gateways (Envoy extauthz/Spring Cloud Gateway), and AI-assisted coding tools (Claude Code/GitHub Copilot).
• Exposure to enterprise monitoring tools including OpenTelemetry, Prometheus, Grafana, and distributed tracing frameworks.
• Prior expertise in regulated sectors such as Banking, Financial Services, Insurance (BFSI), or Government, focusing on Identity & Access Management (IAM), Entitlement Management, and compliance audit readiness highly preferred Key Skills : Policy-as-Code & Authorisation / Open Policy Agent (OPA) & Rego / comprehensions, data references, partial evaluation) and policy modularization / RBAC, ABAC, and ReBAC (Relationship-Based Access Control)/ Creating, signing, versioning, bundling, deploying, rolling back, and hot-reloading OPA policy