Senior Full-Stack Engineer – Python

Senior Full-Stack Engineer - Python, Identity, UCP & Wallets Location: Remote, with at least five hours of daily overlap with US Central and UK working hours Duration: Initial six months; extension likely Experience: 5+ years relevant Role Overview Join Experian's existing Agent Trust scrum team to build verified loyalty identity integrations across Universal Commerce Protocol (UCP) and protocol-agnostic services, along with a wallet-held Verifiable Credential proof of concept. This is a Python-primary full-stack role. Python supports UCP and Anthropic integrations, while TypeScript/Node.js supports edge verification, wallet credentials, merchant middleware, and assistant-platform integrations. Strong working proficiency in both is required. First 90 Days — Key Focus Areas These are initial priorities, not a fixed backlog. Focus areas may evolve as new agentic commerce capabilities emerge. • UCP integration — Python : Implement the com.experian.agent_trust signal with loyalty information. Build a mock merchant that verifies the signal, resolves eligibility server-to-server, applies member pricing and inventory holds, and records pending loyalty earnings. Use OAuth with PKCE identity linking for redemption and transfer. • Edge verification — TypeScript : Define the X-Agent-Trust header contract and build a cloud-agnostic edge/serverless verifier with JWKS caching and spoofed-header removal. Develop merchant middleware that exposes verified loyalty context. • Wallet credentials — TypeScript : Build credential issuance through OID4VCI, wallet presentation through OID4VP, selective disclosure using SD-JWT, and merchant verification. Demonstrate that no personally identifiable information reaches the agent. Explore BBS+ predicates as a stretch goal. • Fraud testing : Test cross-merchant replay, token reuse, enumeration, account-takeover redemption patterns, and inventory hold-and-abandon abuse across both integration paths. • Documentation and demonstrations : Write merchant integration guides for UCP and the header/middleware approach, and build demonstration storefront scenarios. • Merchant-platform integration — TypeScript/Node.js : Add Agent Trust verification to a platform such as Shopify using relevant APIs, checkout extensions, or Functions, with minimal merchant changes. • Bot-management and CDN integration — TypeScript : Build signed "good agent" signals, edge verification, and vendor rule examples that allow verified agents while challenging unverified automation. • Assistant-platform integration — TypeScript : Package capabilities for commerce and assistant platforms, including potential ChatGPT Apps SDK and Microsoft Copilot integrations with Entra ID OAuth. • Payment-wallet prototype — TypeScript : Explore how a trust credential can accompany a payment instrument in third-party web wallets and document native-wallet constraints. Required Qualifications • Five or more years of full-stack engineering experience, with Python as the primary backend language for production SaaS microservices. • Solid TypeScript and Node.js proficiency, including Node.js 22, for edge, wallet, and client-facing integrations. • Strong HTTP fundamentals. • API security experience with OAuth 2.0 Authorization Code with PKCE, client credentials, OIDC, JWT/JWS issuance and verification, and JWKS rotation. • Experience implementing replay controls using audience validation, token identifiers, and expiry limits. • Microservices experience covering service-to-service authentication, header verification, injection prevention, and rate limiting. • Ability to read protocol specifications precisely and deliver independently from written acceptance criteria. Preferred Qualifications • Experience shipping third-party commerce or assistant-platform integrations, including OAuth installation and platform review processes. • Experience building authenticated MCP servers in TypeScript. • Hands-on knowledge of W3C Verifiable Credentials 2.0, OID4VCI/OID4VP, and SD-JWT VC. • Familiarity with DID methods such as did and did, and at least one wallet SDK. • Exposure to BBS+ or zero-knowledge predicate tooling. • Edge/serverless experience with AWS CloudFront Functions, Lambda@Edge, or equivalent platforms, including state-storage integrations. • Familiarity with UCP, RFC 9421, RFC 8693, and OpenID specifications. • Experience with Google UCP or Merchant Center, loyalty/promotions systems, e-commerce fraud, or bot management. Key Deliverables UCP signal schema and platform-agent reference implementation; mock merchant with loyalty tiers; signed-header contract, edge verifier, and middleware SDK; credential issuer/wallet/verifier proof of concept; fraud test suite; integration guides; and demonstration scenarios. Interview Process One 45-minute live technical interview: 15 minutes of discussion followed by 30 minutes of Python and TypeScript/Node.js problem solving on your own machine. AI tools are allowed on screen. Finalists meet the product owner and security lead. Occasional travel to partner or merchant sites may be required.