Description

Role : Cloud Identity Security Engineer (IAM / OAuth / OBO / Federation)
Location: EU (remote)
Duration: initial contract till End of Jan 2027

Details :

• 5+ years cloud security or identity engineering
• Hands-on OAuth 2.0 / OIDC / JWT implementation (token issuance, validation, exchange)
• On-Behalf-Of / token-exchange flows in production (RFC 8693 or equivalent)
• Enterprise identity federation with MS Entra, Okta, or Cognito
• Secure credential / secret management and token lifecycle (rotation, vaulting)

Nice to have:

• AWS Bedrock AgentCore Identity early adopter or equivalent
• AWS AgentCore Gateway outbound-auth integration
• MCP / A2A tool-invocation auth patterns
• AgentCore Policy (Cedar) or AWS Verified Permissions exposure