Software Engineer, Identity Platform

This is a fully remote position, open to applicants in United States.

📋 Description

• Consolidate API keys, management keys, browser sessions, OAuth/OIDC tokens, and MCP logins into a unified principal and authorization framework.

• Take ownership of sign-in processes, MFA, passkeys, enterprise SSO, credential management, expiration, rotation, and revocation.

• Develop delegated access for applications and agents, including OpenRouter sign-in, OAuth for MCP clients, dynamic client registration, and revocable consent grants.

• Implement workload identity federation and short-lived credentials for CI pipelines, cloud workloads, and internal services.

• Create composable, deny-by-default authorization across organizations, workspaces, roles, automation keys, and custom roles.

• Provide SCIM provisioning, group-to-role mapping, domain verification, and self-service SSO integrations.

• Define the identity data model for users, organizations, workspaces, memberships, applications, and guardrails.

• Develop identity fraud detection systems, KYC and verification workflows, step-up checks, account takeover defenses, and abuse signals.

• Ensure credential provenance, clear access decisions, audit logging, high availability, and rapid authentication on inference-request pathways.

• Collaborate with Trust & Safety, Money, Product, Sales, and Customer Success on fraud, verification, onboarding, security assessments, and SSO implementations.

⛳️ Requirements

• 5+ years of experience building production identity, authentication, or authorization systems in a SaaS, developer-platform, or security environment.

• Extensive knowledge of OAuth 2.x, including PKCE, token exchange, and dynamic client registration.

• Profound understanding of OIDC, SAML, SCIM, and JWTs.

• Experience in designing RBAC, ABAC, or ReBAC authorization frameworks for multi-tenant B2B products.

• Proven experience migrating a live system from disparate checks to a cohesive authorization model.

• Practical experience integrating Okta, Entra ID, and Google Workspace.

• Familiarity with authentication platforms such as Clerk, Auth0, WorkOS, or similar solutions.

• Proficient in TypeScript and SQL.

• Comfortable working with Postgres and low-latency, cache-heavy services in critical request paths.

• Security-oriented mindset with expertise in threat modeling and least-privilege design.

• Capable of articulating security decisions to enterprise security reviewers.

• Ability to collaborate effectively across functions with Trust & Safety, Money, Product, Sales, and Customer Success teams.

• High agency with an AI-forward approach; regularly utilizing coding agents.

• Preferred: experience with enterprise SSO and SCIM, workload identity federation, OAuth/consent/delegation for AI agents or MCP clients, identity verification/KYC/fraud and risk systems, policy engines or fine-grained authorization, SOC 2/ISO 27001 compliance, and AI tooling projects.

🏝️ Benefits

• Equity offered