MID Level AI Engineer

• Use Python to integrate agent runtimes with identity and loyalty APIs, handling asynchronous calls, structured results, timeouts and failures.
• Build or integrate MCP tools that let AI agents access verified loyalty functions. Enforce identity and authorization checks server-side before merchant actions are executed.
• Develop a sample merchant that verifies trust signals, checks loyalty eligibility through backend APIs, applies member pricing and stock reservations, and records pending loyalty earnings.
• Implement OAuth Authorization Code with PKCE for customer account linking before loyalty points are redeemed or transferred.
• Design an HTTP trust-header contract and build a Cloudflare Worker verifier with JWKS caching, spoofed-header removal and rate limiting.
• Build Node.js/TypeScript middleware that exposes verified loyalty context to merchant application handlers.
• Create a verifiable credential proof of concept covering issuance to a wallet, selective disclosure, presentation and merchant verification.
• Test replay across merchants, token reuse, enumeration, account takeover and stock reservation abuse. Verify that personal information does not reach the AI agent.
• Write merchant integration guides, build reference clients and servers, and demonstrate the complete flow through a sample storefront., * Experience integrating AI-agent runtimes or tool-using LLM applications with external APIs, including MCP server or client integration and structured tool results., A UCP loyalty signal and platform-agent reference implementation with Python and MCP integration; a sample merchant with loyalty tiers; an HTTP header contract, edge verifier and middleware SDK; a credential issuer, wallet and verifier proof of concept; a fraud test suite; integration guides; and a working storefront demonstration.

• 5+ years of hands-on TypeScript/Node.js development, with experience building backend APIs and integrations. Familiarity with Node 22 and Next.js or a similar framework., * Strong HTTP fundamentals and the ability to build servers and reference clients that follow protocol specifications.
• Production implementation of OAuth 2.0 Authorization Code with PKCE, OpenID Connect and JWT/JWS token verification.
• Experience with ES256 or EdDSA signatures, JWKS key rotation, audience validation, token expiry and replay protection using token identifiers.
• Hands-on verifiable credential experience, including W3C VC 2.0, OID4VCI, OID4VP and SD-JWT VC.
• Familiarity with did:web, did:key and at least one identity wallet SDK, such as Credo or an equivalent.
• Cloudflare Workers or equivalent edge development, including KV or Durable Objects, header verification and rate limiting.
• Ability to interpret MCP, UCP, OpenID and relevant RFC specifications, including RFC 9421 and RFC 8693, and implement independently against acceptance criteria.

Good to have

• BBS+ or zero-knowledge proof tooling.
• Google UCP or Merchant Center integrations.
• Loyalty programmes, promotions systems, e-commerce fraud prevention or bot management.
• Experience with Claude or comparable LLM APIs and agent SDKs.

• Hands-on Python backend integration experience, including asyncio, typed code and automated testing.