Engineer - Identity & Token Security

Design and implement OAuth 2.0 Token Exchange (RFC 8693) capabilities. Develop secure identity delegation and propagation patterns across distributed services. Implement token down-scoping and audience restriction mechanisms aligned to least-privilege principles. Design secure service-to-service authentication frameworks within zero-trust environments. Build and maintain robust JWT validation and cryptographic trust chains. Integrate applications and services using OpenID Connect (OIDC) standards

OAuth 2.0 & Identity Standards Proven hands-on implementation experience with OAuth 2.0 Token Exchange (RFC 8693). Strong understanding of OpenID Connect (OIDC) core specifications. Expert-level understanding of JWT (RFC 7519). Experience signing, validating and encrypting tokens using JWS and JWE. Strong knowledge of JWKS endpoints and automated key rotation strategies. Understanding of secure alternatives to shared-secret authentication mechanisms. Experience securing service-to-service communication within distributed microservice architectures. Understanding of zero-trust security principles. Knowledge of secure transit-layer protection and identity-based access controls. Identity Delegation & Token Management Experience implementing: Token down-scoping Audience restriction (aud) Actor and Subject claims handling Experience designing secure token lifecycle management strategies including: Token caching Token renewal Revocation patterns Familiar with: CDDO Secure by Design principles Experience with cloud-native security architectures. Knowledge of API gateways, service meshes, and federated identity platforms.