North AmericaFull TimeEngineering
Remotely
oauthopenid connectopacedarspirespiffeopenfgaworkload identity federation
Job Description
📋 Description
- Design the identity model for AI agents, including delegated actions and audit attribution.
- Build the real-time authorization engine and help select policy tech (Cedar, OPA, or AuthZEN).
- Define trust in identities from outside platforms like Microsoft Entra and Salesforce; adopt OpenID
- Build authorization and continuous-evaluation using live session and decision signals.
- Own interfaces/contracts the rest of the platform builds against; keep them clean as the platform
- Act as a technical leader across teams, raising the bar on identity and authorization.
🎯 Requirements
- Typically 7 or more years of software engineering experience, with deep expertise in identity
- Hands-on experience building authorization or policy systems such as Cedar, OPA, OpenFGA, or a
- Working knowledge of identity and token standards such as OAuth, OpenID Connect, SPIFFE and SPIRE
- A track record of designing systems and interfaces that other teams build on at scale.
- Ability to lead technical decisions that span multiple teams and communicate them clearly to varied
- We\'d Love to See: experience securing AI or agentic systems; contributions to identity
🎁 Benefits
- Competitive salaries and a meaningful bonus program
- Healthcare insurance and pension/retirement matching
- Life insurance and employee assistance program
- Time off plans and paid company holidays