• Audit and strengthen OAuth 2.0 and OIDC token flows across internal proxies, the control plane, and third-party integrations • Identify and mitigate common and emerging threats in delegated authentication workflows • Review and co-design REST, WebSocket, and streaming APIs with strong boundaries, secure defaults, and least-privilege access models • Help define system boundaries for multi-agent, multi-tenant orchestration • Integrate and tune automated CVE, SCA, and IaC scanning tools into CI/CD pipelines • Convert security findings into high-signal engineering tickets with practical remediation paths • Lead lightweight, iterative threat models for new features and services • Define internal security baselines and policies, and mentor others to promote a strong security culture • Favor automation-friendly controls over burdensome manual security processes • Contribute to compliance initiatives such as SOC 2 and ISO 27001, supporting scalable security programs • Leverage deep expertise in OAuth 2.0/OIDC with real-world experience securing authentication flows in production systems • Design secure APIs, review system architectures, and implement scalable authentication and authorization models • Apply hands-on experience with supply chain and container security tools such as Trivy, Snyk, Grype, and Terraform scanning • Demonstrate familiarity with modern identity platforms like Auth0, Okta, and Keycloak, and with Zero Trust models