Senior Full-Stack Engineer - Python

Join Experian’s existing Agent Trust scrum team to build verified loyalty identity integrations across Universal Commerce Protocol (UCP) and protocol-agnostic services, along with a wallet-held Verifiable Credential proof of concept. This is a Python-primary full-stack role. Python supports UCP and Anthropic integrations, while TypeScript/Node.js supports edge verification, wallet credentials, merchant middleware, and assistant-platform integrations. Strong working proficiency in both is required.

First 90 Days - Key Focus Areas These are initial priorities, not a fixed backlog. Focus areas may evolve as new agentic commerce capabilities emerge.

• UCP integration - Python: Implement the com.experian.agent_trust signal with loyalty information. Build a mock merchant that verifies the signal, resolves eligibility server-to-server, applies member pricing and inventory holds, and records pending loyalty earnings. Use OAuth with PKCE identity linking for redemption and transfer.
• Edge verification - TypeScript: Define the X-Agent-Trust header contract and build a cloud-agnostic edge/serverless verifier with JWKS caching and spoofed-header removal. Develop merchant middleware that exposes verified loyalty context.
• Wallet credentials - TypeScript: Build credential issuance through OID4VCI, wallet presentation through OID4VP, selective disclosure using SD-JWT, and merchant verification. Demonstrate that no personally identifiable information reaches the agent. Explore BBS+ predicates as a stretch goal.
• Fraud testing: Test cross-merchant replay, token reuse, enumeration, account-takeover redemption patterns, and inventory hold-and-abandon abuse across both integration paths.
• Documentation and demonstrations: Write merchant integration guides for UCP and the header/middleware approach, and build demonstration storefront scenarios.
• Merchant-platform integration - TypeScript/Node.js: Add Agent Trust verification to a platform such as Shopify using relevant APIs, checkout extensions, or Functions, with minimal merchant changes.
• Bot-management and CDN integration - TypeScript: Build signed “good agent” signals, edge verification, and vendor rule examples that allow verified agents while challenging unverified automation.
• Assistant-platform integration - TypeScript: Package capabilities for commerce and assistant platforms, including potential ChatGPT Apps SDK and Microsoft Copilot integrations with Entra ID OAuth.
• Payment-wallet prototype - TypeScript: Explore how a trust credential can accompany a payment instrument in third-party web wallets and document native-wallet constraints.

• Five or more years of full-stack engineering experience, with Python as the primary backend language for production SaaS microservices.
• Solid TypeScript and Node.js proficiency, including Node.js 22, for edge, wallet, and client-facing integrations.
• Strong HTTP fundamentals.
• API security experience with OAuth 2.0 Authorization Code with PKCE, client credentials, OIDC, JWT/JWS issuance and verification, and JWKS rotation.
• Experience implementing replay controls using audience validation, token identifiers, and expiry limits.
• Microservices experience covering service-to-service authentication, header verification, injection prevention, and rate limiting.
• Ability to read protocol specifications precisely and deliver independently from written acceptance criteria., * Experience shipping third-party commerce or assistant-platform integrations, including OAuth installation and platform review processes.
• Experience building authenticated MCP servers in TypeScript.
• Hands-on knowledge of W3C Verifiable Credentials 2.0, OID4VCI/OID4VP, and SD-JWT VC.
• Familiarity with DID methods such as did and did, and at least one wallet SDK.
• Exposure to BBS+ or zero-knowledge predicate tooling.
• Edge/serverless experience with AWS CloudFront Functions, Lambda@Edge, or equivalent platforms, including state-storage integrations.
• Familiarity with UCP, RFC 9421, RFC 8693, and OpenID specifications.
• Experience with Google UCP or Merchant Center, loyalty/promotions systems, e-commerce fraud, or bot management.

Key Deliverables UCP signal schema and platform-agent reference implementation; mock merchant with loyalty tiers; signed-header contract, edge verifier, and middleware SDK; credential issuer/wallet/verifier proof of concept; fraud test suite; integration guides; and demonstration scenarios.

Depends on Experience