> Markdown version of [/jobs/ext/3825477-senior-full-stack-engineer-python](https://www.wearedevelopers.com/jobs/ext/3825477-senior-full-stack-engineer-python). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Senior Full-Stack Engineer - Python

- **Company:** Zapcom Group Inc
- **Location:** United States (Remote available)
- **Experience:** Expert
- **Contract:** Permanent contract
- **Skills:** Reference Implementation, Test Suite, Application Programming Interfaces (APIs), Amazon Cloudfront, Software as a Service, Middleware, Python (Programming Language), Node.Js, OAuth, OpenID, Scrum Methodology, Microsoft Copilot, Shopify, Systems Integration, TypeScript, Software Security, Backend, Rate Limiting, Enterprise Integration, GPT, Serverless Computing, Microservices
- **Published:** October 18, 2026
- **Apply:** https://www.dice.com/job-detail/e1809309-5a6e-4c2b-a9ae-29be9a029274

## About the Role

* Five or more years of full-stack engineering experience, with Python as the primary backend language for production SaaS microservices.
 * Solid TypeScript and Node.js proficiency, including Node.js 22, for edge, wallet, and client-facing integrations.
 * Strong HTTP fundamentals.
 * API security experience with OAuth 2.0 Authorization Code with PKCE, client credentials, OIDC, JWT/JWS issuance and verification, and JWKS rotation.
 * Experience implementing replay controls using audience validation, token identifiers, and expiry limits.
 * Microservices experience covering service-to-service authentication, header verification, injection prevention, and rate limiting.
 * Ability to read protocol specifications precisely and deliver independently from written acceptance criteria., * Experience shipping third-party commerce or assistant-platform integrations, including OAuth installation and platform review processes.
 * Experience building authenticated MCP servers in TypeScript.
 * Hands-on knowledge of W3C Verifiable Credentials 2.0, OID4VCI/OID4VP, and SD-JWT VC.
 * Familiarity with DID methods such as did and did, and at least one wallet SDK.
 * Exposure to BBS+ or zero-knowledge predicate tooling.
 * Edge/serverless experience with AWS CloudFront Functions, Lambda@Edge, or equivalent platforms, including state-storage integrations.
 * Familiarity with UCP, RFC 9421, RFC 8693, and OpenID specifications.
 * Experience with Google UCP or Merchant Center, loyalty/promotions systems, e-commerce fraud, or bot management.

Key Deliverables
UCP signal schema and platform-agent reference implementation; mock merchant with loyalty tiers; signed-header contract, edge verifier, and middleware SDK; credential issuer/wallet/verifier proof of concept; fraud test suite; integration guides; and demonstration scenarios.

## Description

Join Experian's existing Agent Trust scrum team to build verified loyalty identity integrations across Universal Commerce Protocol (UCP) and protocol-agnostic services, along with a wallet-held Verifiable Credential proof of concept.
This is a Python-primary full-stack role. Python supports UCP and Anthropic integrations, while TypeScript/Node.js supports edge verification, wallet credentials, merchant middleware, and assistant-platform integrations. Strong working proficiency in both is required.

First 90 Days - Key Focus Areas
These are initial priorities, not a fixed backlog. Focus areas may evolve as new agentic commerce capabilities emerge.

 * UCP integration - Python: Implement the com.experian.agent_trust signal with loyalty information. Build a mock merchant that verifies the signal, resolves eligibility server-to-server, applies member pricing and inventory holds, and records pending loyalty earnings. Use OAuth with PKCE identity linking for redemption and transfer.
 * Edge verification - TypeScript: Define the X-Agent-Trust header contract and build a cloud-agnostic edge/serverless verifier with JWKS caching and spoofed-header removal. Develop merchant middleware that exposes verified loyalty context.
 * Wallet credentials - TypeScript: Build credential issuance through OID4VCI, wallet presentation through OID4VP, selective disclosure using SD-JWT, and merchant verification. Demonstrate that no personally identifiable information reaches the agent. Explore BBS+ predicates as a stretch goal.
 * Fraud testing: Test cross-merchant replay, token reuse, enumeration, account-takeover redemption patterns, and inventory hold-and-abandon abuse across both integration paths.
 * Documentation and demonstrations: Write merchant integration guides for UCP and the header/middleware approach, and build demonstration storefront scenarios.
 * Merchant-platform integration - TypeScript/Node.js: Add Agent Trust verification to a platform such as Shopify using relevant APIs, checkout extensions, or Functions, with minimal merchant changes.
 * Bot-management and CDN integration - TypeScript: Build signed "good agent" signals, edge verification, and vendor rule examples that allow verified agents while challenging unverified automation.
 * Assistant-platform integration - TypeScript: Package capabilities for commerce and assistant platforms, including potential ChatGPT Apps SDK and Microsoft Copilot integrations with Entra ID OAuth.
 * Payment-wallet prototype - TypeScript: Explore how a trust credential can accompany a payment instrument in third-party web wallets and document native-wallet constraints.