Agent Identity Engineer

Red Commerce Schweiz GmbH; Polska; Hybrid; PLN 395,000 - 571,000; Full time

Job summary

Red Commerce Schweiz GmbH is seeking a Cloud Identity Security Engineer to design and implement secure identity and access solutions across cloud environments. The role focuses on IAM, OAuth/OIDC/JWT, and token-exchange using OBO flows in production.

Remote EU cooperation is required, with an initial contract through January 2027. Applicants should bring 5+ years in cloud security or identity engineering, experience with federation partners like MS Entra/Okta/Cognito, and strong secret

Qualifications

• Must have hands-on experience with OAuth 2.0 / OIDC / JWT in production
• Experience with identity federation and token exchange across clouds

Skills

5+ years cloud security or identity

OAuth 2.0 / OIDC / JWT

On-Behalf-Of / token-exchange (RFC 869

Job description

Role : Cloud Identity Security Engineer (IAM / OAuth / OBO / Federation)

Location: EU (remote)

Duration: initial contract till End of Jan 2027

Details :

• 5+ years cloud security or identity engineering
• Hands-on OAuth 2.0 / OIDC / JWT implementation (token issuance, validation, exchange)
• On-Behalf-Of / token-exchange flows in production (RFC 8693 or equivalent)
• Enterprise identity federation with MS Entra, Okta, or Cognito
• Secure credential / secret management and token lifecycle (rotation, vaulting)

Nice to have:

• AWS Bedrock AgentCore Identity early adopter or equivalent
• AWS AgentCore Gateway outbound-auth integration
• MCP / A2A tool-invocation auth patterns
• AgentCore Policy (Cedar) or AWS Verified Permissions exposure