Python Engineer

• 7+ years Python building production microservices for typical modern SaaS backends; strong async (asyncio), typed code, pytest, ruff.

• API security fundamentals: OAuth 2.0 (client credentials, on-behalf-of / token exchange), JWT issuance and verification, JWKS rotation and caching, secrets handling.

• Microservices architecture experience: service-to-service auth, structured error/result handling across service boundaries, fail-open vs. fail-closed reasoning under a latency budget.

• Reads an unfamiliar, unmaintained codebase quickly and cites module and line in every claim; works from written acceptance criteria without supervision.

Nice to have

• OAuth token exchange (RFC 8693) in production, and can explain why forwarding the user’s token downstream is unsafe (aud, scope narrowing, confused deputy); production AWS experience (Lambda or ECS, IAM, Secrets Manager).

• Claude Managed Agents beta (agents, environments, sessions, vaults, always_ask semantics); Claude Code plugins/skills authoring; Bedrock/Vertex/Foundry routing; e-commerce domain (cart, variants, checkout hand-off); Node 22 for the example storefronts.

Deliverables you own. agent-trust-commerce Python package · Managed Agents gateway variant ·

MCP server · commerce-builder companion skill · integration guide · demo against the retail vertical.