Senior Cloud Security Developer (OAuth 2.0)

Quick Facts

• Role: Senior Cloud Security Developer focused on OAuth 2.0 identity and authorization

Description

We are looking for a Senior Cloud Security Developer to design and implement secure identity flows for agent-based architectures. The role focuses on authentication, authorization, token lifecycle management, and federation across enterprise systems using AWS Bedrock AgentCore and OAuth 2.0/OpenID Connect/JWT.

Responsibilities

• Develop inbound and outbound authentication flows using AWS Bedrock AgentCore Identity or similar technology

• Implement On Behalf Of token exchange and scoped identity propagation across agent, tool, and API chains

• Build and maintain OAuth 2.0, OpenID Connect, and JWT-based identity flows (token issuance, validation, exchange, and audience/issuer checks)

• Integrate identity federation with MS Entra Agent ID integration (workload identity brokering)

• Provide gateway outbound authorization and per-target credential management while ensuring secrets are not exposed to the calling agent

• Integrate identity controls into the agent invocation lifecycle through AgentCore Runtime

• Collaborate on identity-aware authorization using Cedar or MS Entra claims mapping with runtime controls

• Ensure secure credential and secret management, including token rotation and vaulting

Requirements

• Experience with AWS Bedrock AgentCore Identity as an early adopter or equivalent

• Experience with AWS AgentCore Gateway outbound authorization integration

• Exposure to MCP or A2A tool invocation authentication patterns

• Exposure to AgentCore Policy using Cedar or AWS Verified Permissions

Benefits

• Up to 26 business vacation days per year

• 10 illness/special days off per year (fully paid)

• Health and life insurance (Luxmed)

• MyBenefit platform with Multisport option

• Internal psychological support service

• English language classes from the first working day

• Access to external learning platforms: O’Reilly, LinkedIn Learning, Udemy, plus internal training

• Flexible workplace: office, home, or hybrid

• Tech Skills Mentoring Program

• Opportunities to develop as a public speaker, mentor, or technical interviewer

• Fully paid idle (bench) when not on a project

• Certification reimbursement (AWS, GCP, Microsoft, etc.)