{"schemaVersion":"jobsearcher.job.v1","id":"9bdd571f462f64cf23b21459","url":"https://jobsearcher.com/jobs/9bdd571f462f64cf23b21459","canonicalUrl":"https://jobsearcher.com/jobs/9bdd571f462f64cf23b21459","title":"Forward Engineer","description":"We're partnering with a global IT Services & Solutions company specializing in IT Staffing, Technology Consulting, Workforce Solutions, and Application Development Services. They help organizations build high-performing technology teams by connecting them with exceptional talent across a wide range of industries, enabling clients to achieve successful business outcomes and helping professionals advance their careers.The Role Implement the UCP side: trust signal with a loyalty block on a platform agent, and a mock UCP merchant that verifies it, resolves eligibility server-to-server, applies member pricing and reserved-inventory holds in the Checkout object, records pending earn on the Order, and steps up to OAuth (PKCE) identity linking only for redeem/transfer. Build the protocol-agnostic rail: X-Agent-Trust header contract, a Cloudflare Worker edge verifier with JWKS caching and spoof-header stripping, and Node/TypeScript merchant middleware exposing a loyalty context to handlers. Build the VC POC: issue an Agent Trust credential over OID4VCI to a holder wallet (Credo or equivalent), present via OID4VP with selective disclosure (SD-JWT first, BBS+ predicate as stretch), verify at the merchant, and prove that no PII reaches the agent. Implement and run the loyalty-fraud test suite (replay across merchants, token reuse, enumeration, ATO-pattern redeem, scalper hold-and-abandon) on both rails. Write the merchant integration guide for the rail and the UCP path; build the demo storefront beats.What You'll Need 5+ years TypeScript/Node (Node 22, Next.js or similar); strong HTTP fundamentals; comfortable writing both a spec-conformant server and a reference client. Identity engineering: OAuth 2.0 Authorization Code + PKCE, OIDC, JWT/JWS (ES256, EdDSA), JWKS rotation, replay controls (aud, jti, TTL); has implemented token verification in production. Verifiable Credentials hands-on: W3C VC 2.0 data model, OID4VCI/OID4VP, SD-JWT VC; familiarity with DID methods (did:web, did:key) and at least one wallet SDK. Edge development: Cloudflare Workers (or equivalent) with KV/Durable Objects; header verification and injection; rate limiting. Reads protocol specifications precisely (UCP, RFC 9421, RFC 8693, OpenID specs) and cites the section; delivers from acceptance criteria without supervision.What's On Offer Opportunity to work on cutting-edge identity engineering and verifiable credential projects. Engage with innovative protocols and build robust solutions. Collaborate on developing critical merchant integration guides.Apply via Haystack today!","company":"Haystack","rawCompany":"haystack","city":"Denver","state":"CO","isRemote":false,"isActive":false,"createdAt":"2026-10-12T08:05:16.407Z","occupations":[{"code":"15-1252.00","title":"Software Developers","slug":"software-developers"},{"code":"15-1299.08","title":"Computer Systems Engineers/Architects","slug":"computer-systems-engineers-architects"},{"code":"15-1254.00","title":"Web Developers","slug":"web-developers"}],"industries":[{"code":"541512","title":"Computer Systems Design Services","slug":"computer-systems-design-services"},{"code":"541511","title":"Custom Computer Programming Services","slug":"custom-computer-programming-services"},{"code":"513210","title":"Software Publishers","slug":"software-publishers"}],"jobPosting":{"@context":"https://schema.org","@type":"JobPosting","title":"Forward Engineer","description":"We're partnering with a global IT Services & Solutions company specializing in IT Staffing, Technology Consulting, Workforce Solutions, and Application Development Services. They help organizations build high-performing technology teams by connecting them with exceptional talent across a wide range of industries, enabling clients to achieve successful business outcomes and helping professionals advance their careers.The Role Implement the UCP side: trust signal with a loyalty block on a platform agent, and a mock UCP merchant that verifies it, resolves eligibility server-to-server, applies member pricing and reserved-inventory holds in the Checkout object, records pending earn on the Order, and steps up to OAuth (PKCE) identity linking only for redeem/transfer. Build the protocol-agnostic rail: X-Agent-Trust header contract, a Cloudflare Worker edge verifier with JWKS caching and spoof-header stripping, and Node/TypeScript merchant middleware exposing a loyalty context to handlers. Build the VC POC: issue an Agent Trust credential over OID4VCI to a holder wallet (Credo or equivalent), present via OID4VP with selective disclosure (SD-JWT first, BBS+ predicate as stretch), verify at the merchant, and prove that no PII reaches the agent. Implement and run the loyalty-fraud test suite (replay across merchants, token reuse, enumeration, ATO-pattern redeem, scalper hold-and-abandon) on both rails. Write the merchant integration guide for the rail and the UCP path; build the demo storefront beats.What You'll Need 5+ years TypeScript/Node (Node 22, Next.js or similar); strong HTTP fundamentals; comfortable writing both a spec-conformant server and a reference client. Identity engineering: OAuth 2.0 Authorization Code + PKCE, OIDC, JWT/JWS (ES256, EdDSA), JWKS rotation, replay controls (aud, jti, TTL); has implemented token verification in production. Verifiable Credentials hands-on: W3C VC 2.0 data model, OID4VCI/OID4VP, SD-JWT VC; familiarity with DID methods (did:web, did:key) and at least one wallet SDK. Edge development: Cloudflare Workers (or equivalent) with KV/Durable Objects; header verification and injection; rate limiting. Reads protocol specifications precisely (UCP, RFC 9421, RFC 8693, OpenID specs) and cites the section; delivers from acceptance criteria without supervision.What's On Offer Opportunity to work on cutting-edge identity engineering and verifiable credential projects. Engage with innovative protocols and build robust solutions. Collaborate on developing critical merchant integration guides.Apply via Haystack today!","datePosted":"2026-10-12T08:05:16.407Z","dateModified":"2026-10-12T08:05:16.407Z","hiringOrganization":{"@type":"Organization","name":"Haystack","sameAs":"https://jobsearcher.com"},"jobLocation":{"@type":"Place","address":{"@type":"PostalAddress","addressLocality":"Denver","addressRegion":"CO","addressCountry":"US"}},"identifier":{"@type":"PropertyValue","name":"JobSearcher","value":"9bdd571f462f64cf23b21459"},"url":"https://jobsearcher.com/jobs/9bdd571f462f64cf23b21459"}}