Barndoor AI

Security Engineer

• Audit and strengthen OAuth 2.0 and OIDC token flows across internal proxies, the control plane, and third-party integrations
• Identify and mitigate common and emerging threats in delegated authentication workflows
• Review and co-design REST, WebSocket, and streaming APIs with strong boundaries, secure defaults, and least-privilege access models
• Help define system boundaries for multi-agent, multi-tenant orchestration
• Integrate and tune automated CVE, SCA, and IaC scanning tools into CI/CD pipelines
• Convert security findings into high-signal engineering tickets with practical remediation paths
• Lead lightweight, iterative threat models for new features and services
• Define internal security baselines and policies, and mentor others to promote a strong security culture
• Favor automation-friendly controls over burdensome manual security processes
• Contribute to compliance initiatives such as SOC 2 and ISO 27001, supporting scalable security programs
• Leverage deep expertise in OAuth 2.0/OIDC with real-world experience securing authentication flows in production systems
• Design secure APIs, review system architectures, and implement scalable authentication and authorization models
• Apply hands-on experience with supply chain and container security tools such as Trivy, Snyk, Grype, and Terraform scanning
• Demonstrate familiarity with modern identity platforms like Auth0, Okta, and Keycloak, and with Zero Trust models