North AmericaFull TimeEngineering
Remotely
oauthopenid connectopacedarspirespiffeopenfga
Job Description
📋 Description
- Design identity model for AI agents, including delegated actions and audit attribution.
- Build realtime authorization engine; help select Cedar, OPA, AuthZEN.
- Define trust in identities from outside platforms (Microsoft Entra, Salesforce) and OpenID Connect
- Develop authorization and continuous-evaluation using live session/decision signals.
- Own interfaces/contracts the platform builds against; keep them clean as it grows.
- Act as technical leader across teams, setting direction on identity and authorization.
🎯 Requirements
- Typically 10+ years of software engineering, with deep expertise in identity, authorization, or
- Hands-on experience building authorization or policy systems such as Cedar, OPA, OpenFGA, or a
- Working knowledge of OAuth, OpenID Connect, SPIFFE/SPIRE, or workload identity federation.
- Track record of designing systems/interfaces that scale and are used by multiple teams.
- Ability to lead technical decisions spanning multiple teams and communicate clearly to varied
🎁 Benefits
- Competitive salaries with equity and bonus programs.
- Healthcare, pension/retirement matching, and life insurance.
- Employee assistance program, time off plans, and paid company holidays.
- Inclusive, values-driven culture focused on collaboration and growth.