Software Engineer, Identity Platform
Core
Designing and building the identity, authentication, and authorization layer for OpenRouter's inference gateway, marketplace, and agentic products to secure access for developers, organizations, and autonomous agents.
Role type
Senior Software Engineer, Identity Platform
Builds
A unified identity system handling API keys, OAuth, OIDC, SSO, delegated access for apps/agents, and secretless workload identity.
Domain
AI Infrastructure / Identity & Access Management (IAM)
Deliverable
production ML models
Required skills
Identity standards (OAuth 2.x, OIDC, SAML, SCIM, JWT), Authorization models (RBAC, ABAC, ReBAC), TypeScript, SQL/Postgres, Enterprise identity providers (Okta, Entra ID, Google Workspace), Security mindset, Low-latency service design
Preferred skills
Workload identity federation, AI agent authentication, Identity verification/KYC/fraud systems, Policy engines (OpenFGA, Cedar, OPA)
Responsibilities
Unify authentication methods (API keys, OAuth, SSO) into a single principal model; Build delegated access and consent grants for apps and autonomous agents; Implement secretless workload identity for CI pipelines and cloud services; Design composable authorization models with deny-by-default; Enable enterprise provisioning via SCIM and self-serve SSO; Define the core identity data model for users, orgs, and workspaces; Implement fraud detection and account takeover defenses; Ensure auditability and correctness of access decisions.
Seniority
Senior, hands-on IC
