Senior Cloud Security Developer with OAuth 2.0

DataArt is seeking a Senior Cloud Security Developer to design and implement secure identity flows for agent-based architectures. You will focus on authentication, authorization, token lifecycle management, and federation across complex enterprise systems.

Key responsibilities

• Develop inbound and outbound authentication flows using AWS Bedrock AgentCore Identity.
• Implement On Behalf Of token exchange and scoped identity propagation across agent, tool, and API chains.
• Maintain OAuth 2.0, OpenID Connect, and JWT-based identity flows, including token issuance and validation.
• Integrate identity federation with MS Entra for workload identity brokering.
• Collaborate on identity-aware authorization using Cedar or MS Entra claims mapping.

Requirements

• Experience with AWS Bedrock AgentCore Identity or equivalent technologies.
• Experience with AWS AgentCore Gateway outbound authorization integration.
• Exposure to MCP or A2A tool invocation authentication patterns.
• Exposure to AgentCore Policy using Cedar or AWS Verified Permissions.

What we offer

• Up to 26 business days of vacation per year plus 10 fully paid illness or special days off.
• Comprehensive health and life insurance coverage.
• Access to the MyBenefit platform including Multisport options.
• Professional development through certification reimbursement, English classes, and access to learning platforms like O’Reilly and Udemy.