Praca w miastach:Praca IT Warszawa•Praca IT Kraków•Praca IT Wrocław•Praca IT Szczecin•Praca IT Poznań•Praca IT Lublin•Praca IT Katowice•Praca IT Bydgoszcz•Praca IT Łódź•Praca IT Białystok•Praca IT Toruń•Praca IT Gdańsk
Stanowiska:Grafik komputerowy praca•Tester gier praca•Programista praca•Tester oprogramowania praca•Frontend Developer praca•Data scientist praca•Tester manualny praca•Tester praca•Analytics praca•Tester aplikacji praca•Programista java praca•Web developer praca
Technologie i narzędzia:Python praca•Cyberbezpieczeństwo praca•Java praca•Bazy danych praca•Cisco praca•C++ praca•Javascript praca•SQL praca•Business Intelligence praca•Delphi praca•Wordpress praca•Testowanie aplikacji praca•C# praca•PHP praca
Specjalizacje:Backend praca•Devops praca•Frontend praca•Full-stack praca•GameDev praca•Mobile praca•Embedded praca•Architecture praca•QA/Testing praca•Security praca•AI/ML praca•Big data science praca•Helpdesk praca•IT admin praca•Agile praca•Product Management praca•Project Management praca•UX/UI praca•Business analytics praca•SAP & ERP praca•System analytics praca•PO/PM praca•Scrum master praca•Analityka praca•Data analytics & BI praca
Offer summary
(Summary generated by AI based on the full job description)
Project focuses on cloud security with identity-first scope, covering token exchange, identity federation, credential protection and policy-based access decisions. Technologies and patterns include OAuth 2.0, OpenID Connect, JWT, On Behalf Of / RFC 8693, integrations with MS Entra, Okta or Amazon Cognito, and optional AgentCore/Bedrock and Cedar/AWS Verified Permissions. Responsibilities include developing inbound and outbound authentication flows, implementing token issuance/validation/exchange and scoped identity propagation, integrating identity federation, implementing gateway outbound authorization and per-target credential management, embedding identity controls into agent invocation lifecycle and ensuring secure secret management and token rotation. Offered benefits include up to 26 days vacation, health care, life insurance, training budget and flexible work model.
from: 29 October 2026
to: 28 November 2026
16 000 - 21 000 złnet (+ VAT)/ mth.B2B contract (full-time)
13 000 - 17 500 złgross/ mth.contract of employment
Offer parameters
level:senior
working mode:remote • hybrid
location:Warszawa, Masovian
Warszawa, Masovian
Requirements
Expected technologies
AWS
Optional technologies
Cassandra
Operating system
Linux
Our requirements
- 5+ years of experience in cloud security or identity engineering
- Hands on experience with OAuth 2.0, OpenID Connect, and JWT implementation, including token issuance, validation, and exchange
- Experience with On Behalf Of or token exchange flows in production, including RFC 8693 or equivalent
- Experience with enterprise identity federation using MS Entra, Okta, or Amazon Cognito
- Experience with secure credential and secret management and token lifecycle practices, including rotation and vaulting
Optional
- Experience with AWS Bedrock AgentCore Identity as an early adopter or equivalent
- Experience with AWS AgentCore Gateway outbound authorization integration
- Exposure to MCP or A2A tool invocation authentication patterns
- Exposure to AgentCore Policy using Cedar or AWS Verified Permissions
Your responsibilities
- Develop inbound and outbound authentication flows using AWS Bedrock AgentCore Identity or similar technology
- Implement On Behalf Of token exchange and scoped identity propagation across agent, tool, and API chains
- Develop and maintain OAuth 2.0, OpenID Connect, and JWT based identity flows, including token issuance, validation, exchange, and audience or issuer checks
- Integrate identity federation with MS Entra Agent ID integration or similar technology for workload identity brokering
- Implement gateway outbound authorization and per target credential management while ensuring secrets are not exposed to the calling agent
- Integrate identity controls into the agent invocation lifecycle through AgentCore Runtime
- Collaborate on identity aware authorization using Cedar or MS Entra claims mapping in coordination with runtime controls
- Support secure credential and secret management, including token rotation and vaulting
About the project
identity focused cloud security initiative designed to support secure agent interactions and enterprise grade authorization controls
work includes token exchange, identity federation, credential protection, and policy based access decisions across distributed systems
This is how we organize our work
This is how we work
you focus on product developmentagile
Team members
12-15 people:backend developerfrontend developertechnical leaderdevOpsautomated test programmermanual testersupportproduct ownerproject manager
This is how we work on a project
- code review
- TDD
- integration tests
- test automation
- unit tests
What we offer
- Vacation days: Up to 26 business days per year
- 10 illness/special days off per year (fully paid, no medical papers needed) for all contract types
- Health and life insurance (Luxmed)
- MyBenefit platform with Multisport option
- Internal psychological support service
- English language classes from the first working day
- Access to external learning platforms: O’Reilly, LinkedIn Learning, Udemy, and a wide catalog of diverse internal training
- Flexible workplace: work from the office, from home, or choose a hybrid option
- Tech Skills Mentoring Program
- Opportunities to develop as a public speaker, mentor, or technical interviewer
- Certification reimbursement (AWS, GCP, Microsoft, etc.)
Development opportunities we offer
- substantive support from technological leaders
- technical knowledge exchange within the company
- time for development of your ideas
Benefits
- sharing the costs of sports activities
- private medical care
- sharing the costs of foreign language classes
- sharing the costs of professional training & courses
- life insurance
- remote work opportunities
- flexible working time
- corporate products and services at discounted prices
- integration events
- employee referral program
- extra leave
DataArt Poland sp. z o.o.
Our client is a big enterprise in Travel & Hospitality domain.
Senior Cloud Security Developer with OAuth 2.0
13k–17.5k zł / mth. (CoE), 16k–21k zł / mth. (B2B)
I apply to:
DataArt Poland sp. z o.o.
Warszawa, Masovian
Need more information?
- Make sure the body of the offer doesn’t already include what you’re looking for.
- Ask a question if you need more information you’re interested in.
- We’ll forward your question to the employer and aim to provide a response within 3 business days.