Software Engineer, Identity Platform
Core
Design and build a unified identity and authorization platform managing API keys, OAuth/OIDC tokens, sessions, and access for apps, AI agents, and enterprise workloads.
Role type
Senior IC software engineer (identity platform)
Builds
Production identity services, authentication flows, authorization models, and credential management systems
Domain
SaaS / Developer Platform / Security
Required skills
OAuth 2.x, OIDC, SAML, SCIM, JWT, RBAC/ABAC/ReBAC, TypeScript, SQL, Postgres, threat modeling, least-privilege design
Preferred skills
Workload identity federation, secretless authentication, KYC/fraud systems, policy engines (OPA/Cedar), AI agent integration, coding agents
Technologies
Okta, Entra ID, Google Workspace, Clerk, Auth0, WorkOS, Stripe Identity, Persona, Sift, OpenFGA, Cedar, OPA, Zanzibar
Responsibilities
Unify API keys, management keys, browser sessions, OAuth and OIDC tokens, and MCP logins under a common identity model; Build authentication features including sign-in, MFA, passkeys, enterprise SSO, and credential lifecycle management; Develop delegated access, OAuth flows, dynamic client registration, and identity capabilities for apps and AI agents; Implement workload identity federation and short-lived, secretless credentials for CI pipelines and cloud workloads; Design composable, fine-grained authorization for organizations, workspaces, users, apps, agents, roles, and permissions; Build enterprise provisioning with SCIM, group-to-role mapping, domain verification, and partner account provisioning; Define the core identity data model and protect users through fraud detection, KYC, verification, and account-takeover defenses
Seniority
Senior, hands-on IC