{"id":2123649,"url":"https://alion.io/job/dataart-senior-cloud-security-developer-with-oauth-2-0","title":"Senior Cloud Security Developer with OAuth 2.0","company":{"id":46984,"name":"DataArt","domain":"dataart.com","url":"https://alion.io/company/dataart-com","size_band":"201-500","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":null,"truth_index":null},"role":"Security","role_family":"Security","seniority":"senior","employment_type":"full_time","work_mode":"remote","remote_scope":"stated_countries","remote_scope_basis":"inferred_payroll_markers","remote_working_hours":null,"hiring_geo_confidence":"inferred","locations":["Wrocław, Poland","Warsaw, Poland","Lublin, Poland","Kraków, Poland","Łódź, Poland"],"countries":["PL"],"hiring_countries":["PL"],"hiring_countries_total":1,"salary":{"min":14000,"max":16500,"currency":"PLN","period":"month","gross":null,"usd_annual":50652},"salary_estimate":null,"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"A2A","optional":false},{"name":"AWS","optional":false},{"name":"AWS Bedrock","optional":false},{"name":"AWS Bedrock AgentCore","optional":false},{"name":"GCP","optional":false},{"name":"Model Context Protocol","optional":false},{"name":"Okta","optional":true}],"status":"live","first_seen_at":"2026-10-06T08:05:44Z","employer_posted_date":null,"last_verified_at":"2026-10-06T08:05:44Z","board_verified":false,"closed_at":null,"days_open":7,"trust":{"level":"not_scored","repost_count":null,"flags":[],"days_open":7},"description":"Technology stack\nAWS Bedrock AgentCore Identity, OAuth 2.0, OpenID Connect, JWT, MS Entra, Okta, Amazon Cognito, Cedar, AWS Verified Permissions\nProject overview\nAWS Bedrock AgentCore Identity, OAuth 2.0, OpenID Connect, JWT, MS Entra, Okta, Amazon Cognito, Cedar, AWS Verified Permissions\nPosition overview\nWe are looking for a Senior Cloud Security Developer who will help design and implement secure identity flows for agent based architectures, with a focus on authentication, authorization, token lifecycle management, and federation across enterprise systems.\nResponsibilities\nDevelop inbound and outbound authentication flows using AWS Bedrock AgentCore Identity or similar technology\n\nImplement On Behalf Of token exchange and scoped identity propagation across agent, tool, and API chains\n\nDevelop and maintain OAuth 2.0, OpenID Connect, and JWT based identity flows, including token issuance, validation, exchange, and audience or issuer checks\n\nIntegrate identity federation with MS Entra Agent ID integration or similar technology for workload identity brokering\n\nImplement gateway outbound authorization and per target credential management while ensuring secrets are not exposed to the calling agent\n\nIntegrate identity controls into the agent invocation lifecycle through AgentCore Runtime\n\nCollaborate on identity aware authorization using Cedar or MS Entra claims mapping in coordination with runtime controls\n\nSupport secure credential and secret management, including token rotation and vaulting\n\nRequirements\nExperience with AWS Bedrock AgentCore Identity as an early adopter or equivalent\n\nExperience with AWS AgentCore Gateway outbound authorization integration\n\nExposure to MCP or A2A tool invocation authentication patterns\n\nExposure to AgentCore Policy using Cedar or AWS Verified Permissions\n\nWhat We Offer:\nVacation days: Up to 26 business days per year.\n\n10 illness/special days off per year (fully paid, no medical papers needed) for all contract types\n\nHealth and life insurance (Luxmed)\n\nMyBenefit platform with Multisport option\n\nInternal psychological support service\n\nEnglish language classes from the first working day\n\nAccess to external learning platforms: O’Reilly, LinkedIn Learning, Udemy, and a wide catalog of diverse internal training\n\nFlexible workplace: work from the office, from home, or choose a hybrid option\n\nTech Skills Mentoring Program\n\nOpportunities to develop as a public speaker, mentor, or technical interviewer\n\nFully paid idle (bench) when not involved in a project\n\nCertification reimbursement (AWS, GCP, Microsoft, etc.)\n\nTech stack\nAWS AgentCore Registry\nCI/CD\nCedar\nOpenID\noauth\nOkta\nAmazon Cognito","description_format":"text","description_chars":2661,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["Certification reimbursement","Flexible schedule","Life insurance"],"hiring_locations":[{"name":"Poland","iso":"PL","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Cloud Security","IT Outsourcing & Dedicated Teams","Custom Software Development"],"lifecycle":[{"event":"open","at":"2026-10-08T23:50:21Z"}],"visa":[],"liveness":{"score":90,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.903,"p_room":1,"age_days":6,"expected_fill_days":49,"reasons":["seen:6","velocity","win:early"],"computed_at":"2026-10-13T05:45:00Z"},"pay":{"stated_usd_annual":50652,"is_top_pay":false},"html_url":"https://alion.io/job/dataart-senior-cloud-security-developer-with-oauth-2-0","json_url":"https://alion.io/job/dataart-senior-cloud-security-developer-with-oauth-2-0.json","meta":{"generated_at":"2026-10-13T09:54:48Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":15032,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-14T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":46984},"rest":"https://alion.io/mcp/rest/get_company?id=46984"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fdataart-senior-cloud-security-developer-with-oauth-2-0"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fdataart-senior-cloud-security-developer-with-oauth-2-0"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fdataart-senior-cloud-security-developer-with-oauth-2-0"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/dataart-senior-cloud-security-developer-with-oauth-2-0\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fdataart-senior-cloud-security-developer-with-oauth-2-0"}]}