ABOUT THE TEAM

Our team is responsible for architecting, delivering, and scaling Open Policy Agent (OPA) integration across autonomous systems and cloud platforms. We bridge security, compliance, and engineering to enforce fine-grained access controls in real-time mission environments. Working closely with core systems engineers and security specialists, we ensure robust policy execution at scale.

YOUR MISSION

As OPA Lead, you will define and execute the policy-as-code strategy across STARK’s autonomous defense platforms. You will lead the design, implementation, and governance of OPA policies to maintain security, compliance, and multi-domain operational readiness.

WHAT YOU WILL DO AT STARK

• Lead the architecture and implementation of OPA and Rego policies across multi-cloud and edge infrastructure.
• Establish policy governance models, CI/CD integration, and automated testing frameworks for policy-as-code.
• Collaborate with security and engineering leads to embed authorization checks into microservices and autonomous agents.
• Optimize Rego policy evaluation performance and resource consumption for resource-constrained edge systems.
• Monitor, audit, and troubleshoot policy decisions in high-throughput production environments.
• Mentor engineering teams on policy-as-code best practices and secure system design.

WHAT YOU BRING TO THE MISSION

• Proven experience designing and deploying Open Policy Agent (OPA) and authoring complex Rego policies in production.
• Strong background in cloud-native technologies (Kubernetes, Docker, Service Mesh) and microservices architecture.
• Hands-on experience with DevSecOps, CI/CD pipelines, and infrastructure-as-code (Terraform, CloudFormation).
• Solid understanding of security standards, RBAC/ABAC models, and identity management (OAuth2, OIDC, SPIFFE/SPIRE).
• Fluency in English and degree in Computer Science, Cybersecurity, or equivalent practical experience.

NICE TO HAVE

• Experience in the defence, aerospace, or critical infrastructure sectors.
• Familiarity with edge computing architectures and embedded runtime environments.
• Active NATO security clearance or eligibility for rapid clearance processing.