Software Engineer, Identity Platform
OpenRouter
Posted: 10/21/2026CloudPostgresSQLTypeScript
Dashboard Developer, Medicare/Medicaid
General Dynamics Information Technology
Posted: 10/21/2026JavaScriptPythonSQLTableau
Email Developer
EBG
Posted: 10/21/2026ETLPythonRustSubversionTypeScript
Email Developer
EBG
Posted: 10/21/2026ETLPythonRustSubversionTypeScript
Software Engineer
Ottimate
Posted: 10/21/2026AngularAWSDjangoDockerERPPostgresPythonTypeScript
Principal Clinical Database Systems Programmer
BridgeBio
Posted: 10/21/2026PythonSQLTableauVault
Director of Engineering, Product
Atria Institute
Posted: 10/21/2026
Software Engineer
CTI Staffing
Posted: 10/21/2026iOSSwift
Software Engineer
Skillable
Posted: 10/21/2026CloudEntity FrameworkJavaScriptNext.jsTypeScript.NET
AI Agent Developer
Lennar
Posted: 10/20/2026AWSCloudJavaScriptPythonSQLTypeScript
Union Mobile Engineer
Jones Lang LaSalle Americas, Inc.
Posted: 10/20/2026
Software Engineer
Brooks Automation
Posted: 10/20/2026JavaScriptLinuxPythonSDLCC++
Engineering, Summer Intern
Canvas
Posted: 10/20/2026
Software Engineer
Salesforce
Posted: 10/20/2026Distributed SystemsJavaLinuxPythonSplunkSQLC++
Senior AI Agent Developer
CrowdStrike
Posted: 10/20/2026AWSCloudPython
CAD Plug In Developer
Trilon Group
Posted: 10/20/2026GraphQLPostGISPostgresC++.NET
Director, Global Value Engineering
IFS
Posted: 10/20/2026
Application Systems Programmer I
State of Florida
Posted: 10/20/2026ITSMServiceNow
Power Apps Developer, Mid
Booz Allen Hamilton
Posted: 10/20/2026CloudSQLTableau
Engineering Intern
Mission Technologies, a division of HII
Posted: 10/20/2026Assembly
Engineering Intern
Mission Technologies, a division of HII
Posted: 10/20/2026Assembly
Software Engineer, Identity Platform
OpenRouterPosted 10/21/2026full-timeRemote • United StatesMid-LevelSenior💰 $215,000 - $285,000 per yearWebsite
Core Competencies
Role fitCore Competencies
Use this summary to align your resume positioning with the role.
Demonstrates expertise in building and managing identity, authentication, and authorization systems, with a strong focus on OAuth 2.x, OIDC, and SCIM. Proven ability to design and implement secure, scalable solutions for multi-tenant environments while collaborating cross-functionally with various teams.
Highest-signal resume keywords
OAuth 2.x FluencyOIDC, SAML, SCIM, JWT ExpertiseRBAC, ABAC, ReBAC Design ExperienceIntegration with Okta, Entra ID, Google WorkspaceStrong TypeScript and SQL Skills
Tech Stack
Tools & technologiesAbout the role
Key responsibilities & impact- Unify API keys, management keys, browser sessions, OAuth/OIDC tokens and MCP logins under a single principal and authorization model
- Own sign-in, MFA, passkeys, enterprise SSO, credential scoping, expiration, rotation and revocation
- Build delegated access for applications and agents, including OpenRouter sign-in, OAuth for MCP clients, dynamic client registration and revocable consent grants
- Implement workload identity federation and short-lived credentials for CI pipelines, cloud workloads and internal services
- Build composable, deny-by-default authorization across organizations, workspaces, roles, automation keys and custom roles
- Deliver SCIM provisioning, group-to-role mapping, domain verification and self-serve SSO integrations
- Define the identity data model for users, organizations, workspaces, memberships, apps and guardrails
- Develop identity fraud detection, KYC and verification flows, step-up checks, account-takeover defenses and abuse signals
- Ensure credential provenance, explainable access decisions, audit logging, high availability and fast authentication on inference-request paths
- Partner with Trust & Safety, Money, Product, Sales and Customer Success on fraud, verification, onboarding, security reviews and SSO rollouts
Requirements
What you’ll need- 5+ years building production identity, authentication or authorization systems at a SaaS, developer-platform or security company
- Deep fluency in OAuth 2.x, including PKCE, token exchange and dynamic client registration
- Deep fluency in OIDC, SAML, SCIM and JWTs
- Experience designing RBAC, ABAC or ReBAC authorization models for multi-tenant B2B products
- Experience migrating a live system from ad-hoc checks to a unified authorization model
- Hands-on experience integrating Okta, Entra ID and Google Workspace
- Experience with an auth platform such as Clerk, Auth0, WorkOS or similar
- Strong TypeScript and SQL
- Comfortable with Postgres and low-latency, cache-heavy services on a critical request path
- Security mindset with threat modeling and least-privilege design
- Ability to explain security decisions to enterprise security reviewers
- Ability to work cross-functionally with Trust & Safety, Money, Product, Sales and CS
- High agency and AI-forward approach; use of coding agents daily
- Nice to have: enterprise SSO and SCIM, workload identity federation, OAuth/consent/delegation for AI agents or MCP clients, identity verification/KYC/fraud and risk systems, policy engines or fine-grained authorization, SOC 2/ISO 27001 compliance, AI tooling projects
Benefits
Comp & perks- Equity offered 📊 Check your resume score for this job Improve your chances of getting an interview by checking your resume score before you apply. Check Resume Score
ATS Keywords
✓ Tailor your resumeApplicant Tracking System Keywords
Tip: use these terms in your resume and cover letter to boost ATS matches.
Hard Skills
OAuth 2.xOIDCSAMLSCIMJWTRBACABACReBACTypeScriptSQL
Soft Skills
Cross-Functional CollaborationSecurity Decision ExplanationHigh Agency
Tools & Technologies
OktaEntra IDGoogle WorkspaceClerkAuth0WorkOSPostgres
Certifications & Qualifications
SOC 2ISO 27001
Industry Keywords
Identity ManagementAuthentication SystemsAuthorization ModelsFraud DetectionKYCWorkload Identity FederationEnterprise SSOCredential ScopingAudit LoggingDynamic Client Registration