Agent Identity Engineer

Cloud Identity Security Engineering

Join a remote team within the EU to drive the evolution of cloud identity security. This role focuses on implementing robust identity and access management solutions, ensuring secure token lifecycles, and integrating advanced authentication patterns for enterprise-scale applications.

Key Responsibilities and Requirements

• Bring 5+ years of experience in cloud security or identity engineering.
• Execute hands-on implementation of OAuth 2.0, OIDC, and JWT, covering token issuance, validation, and exchange.
• Manage On-Behalf-Of and token-exchange flows in production environments, adhering to RFC 8693 or equivalent standards.
• Establish enterprise identity federation using MS Entra, Okta, or Cognito.
• Oversee secure credential and secret management, including token lifecycle tasks such as rotation and vaulting.

Preferred Qualifications

• Early adoption experience with AWS Bedrock AgentCore Identity or equivalent systems.
• Integration of AWS AgentCore Gateway outbound-auth.
• Knowledge of MCP and A2A tool-invocation authentication patterns.
• Exposure to AgentCore Policy (Cedar) or AWS Verified Permissions.