Python Engineer
Must have
• 7+ years Python building production microservices for typical modern SaaS backends; strong async (asyncio), typed code, pytest, ruff.
• API security fundamentals: OAuth 2.0 (client credentials, on-behalf-of / token exchange), JWT issuance and verification, JWKS rotation and caching, secrets handling.
• Microservices architecture experience: service-to-service auth, structured error/result handling across service boundaries, fail-open vs. fail-closed reasoning under a latency budget.
• Reads an unfamiliar, unmaintained codebase quickly and cites module and line in every claim; works from written acceptance criteria without supervision.
Nice to have
• OAuth token exchange (RFC 8693) in production, and can explain why forwarding the user's token downstream is unsafe (aud, scope narrowing, confused deputy); production AWS experience (Lambda or ECS, IAM, Secrets Manager).
• Shipped tool-using LLM agents on the Claude Messages API or Agent SDK; understands prompt caching mechanics and why static-prefix bytes matter; built or integrated MCP servers (streamable HTTP) with authentication in front of them; has built or extended an LLM evaluation harness.
• Claude Managed Agents beta (agents, environments, sessions, vaults, always_ask semantics); Claude Code plugins/skills authoring; Bedrock/Vertex/Foundry routing; e-commerce domain (cart, variants, checkout hand-off); Node 22 for the example storefronts.
Deliverables you own. agent-trust-commerce Python package · Managed Agents gateway variant ·
MCP server · commerce-builder companion skill · integration guide · demo against the retail vertical.
