Senior Cloud Security Developer with OAuth 2.0

DataArt is seeking a Senior Cloud Security Developer to join our team and design secure identity flows for agent-based architectures. You will focus on authentication, authorization, token lifecycle management, and federation across complex enterprise systems, ensuring robust security in cloud environments.

Key responsibilities

• Develop inbound and outbound authentication flows using AWS Bedrock AgentCore Identity.
• Implement On Behalf Of token exchange and scoped identity propagation across agent, tool, and API chains.
• Maintain OAuth 2.0, OpenID Connect, and JWT-based identity flows, including token validation and audience checks.
• Integrate identity federation with MS Entra for workload identity brokering.
• Collaborate on identity-aware authorization using Cedar or MS Entra claims mapping.

Requirements

• Proven experience with AWS Bedrock AgentCore Identity or equivalent technologies.
• Practical knowledge of AWS AgentCore Gateway outbound authorization integration.
• Exposure to MCP or A2A tool invocation authentication patterns.
• Familiarity with AgentCore Policy using Cedar or AWS Verified Permissions.

What we offer

• Up to 26 business days of vacation per year plus 10 paid illness or special days off.
• Comprehensive health and life insurance coverage.
• Access to the MyBenefit platform including Multisport options.
• Professional development through English classes, certification reimbursement, and access to learning platforms like O’Reilly and Udemy.
• Internal psychological support services and a dedicated Tech Skills Mentoring Program.