{"id":3453404,"url":"https://alion.io/job/dataart-senior-cloud-security-developer-with-oauth-2-0-3","title":"Senior Cloud Security Developer with OAuth 2.0","company":{"id":46984,"name":"DataArt","domain":"dataart.com","url":"https://alion.io/company/dataart-com","size_band":"51-200","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Schema","truth_index":{"grade":"B","score":75,"open_postings":18,"ghost_share":0,"stale_share":1,"repost_share":0,"time_to_fill_p50_days":27,"computed_at":"2026-11-02T06:13:15Z"}},"role":"Security","role_family":"Security","seniority":"senior","employment_type":"full_time","work_mode":"remote","remote_scope":"stated_countries","remote_scope_basis":"board_field","remote_working_hours":null,"hiring_geo_confidence":"inferred","locations":["Almaty, Kazakhstan"],"countries":["KZ"],"hiring_countries":["BG","CY","KZ","PL","RO","RS","UA","AM","GE","LV"],"hiring_countries_total":10,"salary":null,"salary_estimate":{"min_usd":17500,"max_usd":40000,"period":"year","method":"global_role_cell_scaled_by_country","sample_n":2372},"experience_years_min":5,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"A2A","optional":false},{"name":"AWS","optional":false},{"name":"AWS Bedrock","optional":false},{"name":"AWS Bedrock AgentCore","optional":false},{"name":"Model Context Protocol","optional":false},{"name":"Okta","optional":false}],"status":"live","first_seen_at":"2026-09-14T00:00:00Z","employer_posted_date":"2026-10-22","last_verified_at":"2026-11-02T20:12:43Z","board_verified":true,"closed_at":null,"days_open":50,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":50},"description":"We are looking for a Senior Cloud Security Developer who will help design and implement secure identity flows for agent based architectures, with a focus on authentication, authorization, token lifecycle management, and federation across enterprise systems.\nYou will contribute to an identity focused cloud security initiative designed to support secure agent interactions and enterprise grade authorization controls. The work includes token exchange, identity federation, credential protection, and policy based access decisions across distributed systems.\nDevelop inbound and outbound authentication flows using AWS Bedrock AgentCore Identity or similar technology\nImplement On Behalf Of token exchange and scoped identity propagation across agent, tool, and API chains\nDevelop and maintain OAuth 2.0, OpenID Connect, and JWT based identity flows, including token issuance, validation, exchange, and audience or issuer checks\nIntegrate identity federation with MS Entra Agent ID integration or similar technology for workload identity brokering\nImplement gateway outbound authorization and per target credential management while ensuring secrets are not exposed to the calling agent\nIntegrate identity controls into the agent invocation lifecycle through AgentCore Runtime\nCollaborate on identity aware authorization using Cedar or MS Entra claims mapping in coordination with runtime controls\nSupport secure credential and secret management, including token rotation and vaulting\n5+ years of experience in cloud security or identity engineering\nHands on experience with OAuth 2.0, OpenID Connect, and JWT implementation, including token issuance, validation, and exchange\nExperience with On Behalf Of or token exchange flows in production, including RFC 8693 or equivalent\nExperience with enterprise identity federation using MS Entra, Okta, or Amazon Cognito\nExperience with secure credential and secret management and token lifecycle practices, including rotation and vaulting\nExperience with AWS Bedrock AgentCore Identity as an early adopter or equivalent\nExperience with AWS AgentCore Gateway outbound authorization integration\nExposure to MCP or A2A tool invocation authentication patterns\nExposure to AgentCore Policy using Cedar or AWS Verified Permissions","description_format":"text","description_chars":2267,"description_truncated":false,"requirements":{"experience_years_min":5,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[{"name":"Bulgaria","iso":"BG","kind":"country"},{"name":"Cyprus","iso":"CY","kind":"country"},{"name":"Kazakhstan","iso":"KZ","kind":"country"},{"name":"Poland","iso":"PL","kind":"country"},{"name":"Romania","iso":"RO","kind":"country"},{"name":"Serbia","iso":"RS","kind":"country"},{"name":"Ukraine","iso":"UA","kind":"country"},{"name":"Armenia","iso":"AM","kind":"country"},{"name":"Georgia","iso":"GE","kind":"country"},{"name":"Latvia","iso":"LV","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Cloud Security","IT Outsourcing & Dedicated Teams","Custom Software Development"],"lifecycle":[{"event":"open","at":"2026-10-29T12:30:09Z"}],"visa":[],"liveness":{"score":15,"band":"cold","label":"Long shot","p_open":1,"p_active":0.429,"p_room":0.36,"age_days":49,"expected_fill_days":27,"reasons":["conf:12","stale_co","velocity","win:tail","crowd:brand"],"computed_at":"2026-11-02T06:13:15Z"},"pay":null,"html_url":"https://alion.io/job/dataart-senior-cloud-security-developer-with-oauth-2-0-3","json_url":"https://alion.io/job/dataart-senior-cloud-security-developer-with-oauth-2-0-3.json","meta":{"generated_at":"2026-11-03T01:26:30Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":1947,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-04T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":46984},"rest":"https://alion.io/mcp/rest/get_company?id=46984"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fdataart-senior-cloud-security-developer-with-oauth-2-0-3"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fdataart-senior-cloud-security-developer-with-oauth-2-0-3"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fdataart-senior-cloud-security-developer-with-oauth-2-0-3"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/dataart-senior-cloud-security-developer-with-oauth-2-0-3\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fdataart-senior-cloud-security-developer-with-oauth-2-0-3"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3453404}},{"tool":"search_jobs","arguments":{"company":"dataart.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3453404},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}