Senior Software Engineer, Identity & Authorization

📋 Description

• Design and operate central authorization interfaces with typed principals, actions, resources
• Evolve enterprise roles, groups, app access, entitlements, and workspace policy so common cases
• Build and operate Replit's Security Token Service and workload identity using OAuth 2.0 token
• Threat-model delegation, confused-deputy risks, and cross-tenant movement, then make secure
• Lead compatible migrations with shadow evaluation, feature gates, telemetry, and rollback plans
• Partner with Agent, Connectors, Enterprise, Security, and Infrastructure teams to turn product

🎯 Requirements

• Experience shipping and operating security-sensitive backend or distributed systems in production
• Depth in authentication, authorization, or identity systems, such as OAuth 2.0, OIDC, JWT, mTLS
• Strong understanding of multi-tenant security, least privilege, delegation, privilege attenuation
• Experience migrating security-sensitive systems without breaking callers, including typed
• Fluency in at least one production backend stack, such as TypeScript, Go, Rust, Postgres
• Ability to make and communicate tradeoffs across security, reliability, latency, product

🎁 Benefits

• Competitive Salary & Equity
• 401(k) Program with a 4% match (US Only)
• Health, Dental, Vision and Life Insurance
• Short Term and Long Term Disability
• Paid Parental, Medical, Caregiver Leave
• Flexible Time Off (FTO) + Holidays