Senior Cloud Security Developer with OAuth 2.0

DataArt is seeking a Senior Cloud Security Developer to design and implement robust identity flows for agent-based architectures. You will focus on authentication, authorization, token lifecycle management, and federation across complex enterprise systems.

Key responsibilities

• Develop inbound and outbound authentication flows using AWS Bedrock AgentCore Identity.
• Implement On Behalf Of token exchange and scoped identity propagation across agent, tool, and API chains.
• Maintain OAuth 2.0, OpenID Connect, and JWT-based identity flows, including token issuance and validation.
• Integrate identity federation with MS Entra Agent ID for workload identity brokering.
• Collaborate on identity-aware authorization using Cedar or MS Entra claims mapping.

Requirements

• Experience with AWS Bedrock AgentCore Identity or equivalent technologies.
• Proven background in AWS AgentCore Gateway outbound authorization integration.
• Exposure to MCP or A2A tool invocation authentication patterns.
• Familiarity with AgentCore Policy using Cedar or AWS Verified Permissions.

What we offer

• Up to 26 business days of vacation per year plus 10 paid illness/special days.
• Comprehensive health and life insurance coverage via Luxmed.
• Access to the MyBenefit platform including Multisport options.
• Professional development through English classes, certification reimbursements, and access to learning platforms like O’Reilly and Udemy.
• Internal psychological support services and a dedicated Tech Skills Mentoring Program.