Agent Identity Engineer

RED Global (United Kingdom); Województwo świętokrzyskie; Hybrid; PLN 395,000 - 527,000; Full time

Job summary

RED Global is seeking a Cloud Identity Security Engineer to design and implement secure IAM solutions, including OAuth 2.0 / OIDC / JWT and token-exchange flows across cloud platforms. This EU remote contract role targets seasoned professionals.

You will work with enterprise federation (MS Entra, Okta, Cognito) and manage secure token lifecycles and secret management. Initial contract through Jan 2027 with potential extensions.

Qualifications

• 5+ years of cloud security or identity engineering experience.
• Hands-on experience with OAuth 2.0 / OIDC / JWT.

Responsibilities

• Design and implement secure IAM solutions for cloud workloads.
• Manage secret vaulting and credential rotation.
• Implement and test token exchange and federation workflows.

Skills

Cloud security / identity engineering

OAuth 2.0 / OIDC / JWT

On-Behalf-Of / token-exchange

Enterprise identity federation

Job description

Role : Cloud Identity Security Engineer (IAM / OAuth / OBO / Federation)

Location: EU (remote)

Duration: initial contract till End of Jan 2027

Details :

• 5+ years cloud security or identity engineering
• Hands-on OAuth 2.0 / OIDC / JWT implementation (token issuance, validation, exchange)
• On-Behalf-Of / token-exchange flows in production (RFC 8693 or equivalent)
• Enterprise identity federation with MS Entra, Okta, or Cognito
• Secure credential / secret management and token lifecycle (rotation, vaulting)

Nice to have:

• AWS Bedrock AgentCore Identity early adopter or equivalent
• AWS AgentCore Gateway outbound-auth integration
• MCP / A2A tool-invocation auth patterns
• AgentCore Policy (Cedar) or AWS Verified Permissions exposure