10+ years in solutions or software architecture with hands-on code, for typical modern SaaS backends.
API security fundamentals: OAuth 2.0 / OIDC, JWT issuance and verification, JWKS rotation, and microservices architecture (service-to-service auth, API gateways, zero-trust patterns) — can design these for a system no single team fully owns.
Has co-designed an integration with an external platform team (IdP, cloud, CDN, commerce platform) where neither side owned the whole system.
Threat-modelling and privacy-by-design experience; can write an ADR that engineers actually follow and a sequence diagram a partner can read.
Consulting-grade communication: has led technical working sessions with external engineering teams and translated between executives and builders.
Preferred Qualification:
Working knowledge of Anthropic's Claude platform (Messages API tool use, prompt caching, Agent SDK, Managed Agents) and the Model Context Protocol, including authenticated MCP servers; familiarity with agentic-commerce protocols (UCP, OpenAI ACP, AP2), PCI-adjacent checkout flows, and KYA concepts.
Verifiable Credentials (W3C VC 2.0, OID4VCI/OID4VP, SD-JWT or BBS+); fraud/risk decisioning platforms; CDN/edge architectures (AWS CloudFront or equivalent); prior forward-deployed or client-embedded delivery experience