Software Engineer – Identity & Authorization

Baseten

. Lead identity and authorization projects from problem definition and technical design through implementation, launch, and iteration .

Posted 10/22/2026full-timeSan Francisco • California • United StatesMid-LevelSenior💰 $165,000 - $330,000 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in designing and implementing authorization systems, including fine-grained access control and multi-tenant architectures. Proven ability to lead technical projects from design through production, ensuring quality and security in user workflows.

Highest-signal resume keywords

Authorization System DesignFine-Grained Access ControlMulti-Tenant Systems DevelopmentPython ProgrammingGo Programming

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Authorization System ImplementationPolicy Engine DevelopmentEnd-to-End OwnershipProduction Backend SystemsCloud Infrastructure ManagementKubernetesOAuth ProtocolOIDC ProtocolSCIM ProvisioningSession Expiry Policies

Soft Skills

Technical LeadershipMentorshipCollaboration

Tools & Technologies

OpenFGASpiceDBZanzibarBaseten

Industry Keywords

Identity ManagementAuthorization ProjectsUser WorkflowsSecurity RequirementsOperational Ownership

Tech Stack

Tools & technologies

CloudKubernetesPythonGo

About the role

Key responsibilities & impact

Lead identity and authorization projects from problem definition and technical design through implementation, launch, and iteration
Design authorization and credential models supporting critical user workflows and safe platform evolution
Partner with product, design, and customer-facing teams to translate enterprise security requirements into durable technical solutions
Establish engineering practices for quality, security, observability, and operational ownership
Provide technical leadership and mentorship as the team grows
Build Baseten’s fine-grained authorization system, credential systems, and enterprise admin experiences
Develop authorization capabilities for users, service accounts, and agentic workloads
Support programmatic authentication, agent credentials, SSO, SCIM provisioning, session expiry policies, and admin controls

Requirements

What you’ll need

4-5+ years of experience building production backend systems
Hands-on design and implementation of a product authorization system, including per-resource or per-object permissions, relationship-based access control, a policy engine, or a fine-grained authorization system in the style of Zanzibar, OpenFGA, SpiceDB, or Cedar
Demonstrated end-to-end ownership from first design through implementation, production rollout, and iteration with users
Experience developing and operating multi-tenant systems at scale, where authorization checks sit in the request path and latency and consistency matter
Comfort working across the full stack, from product and application code to cloud and Kubernetes infrastructure
Experience with Python and Go
Experience running an OpenFGA, SpiceDB, or similar deployment in production, beyond a proof of concept
Working knowledge of OAuth, OIDC, and SCIM at the protocol level

Benefits

Comp & perks

Competitive compensation, including meaningful equity
(U.S. only) 100% coverage of medical, dental, and vision insurance for employee and dependents
Flexible PTO policy including company wide Winter Break
Paid parental leave
Fertility and family-building stipend through Carrot
(U.S. only) Company-facilitated 401(k)
Exposure to a variety of ML startups, offering unparalleled learning and networking opportunities