Software Engineer - Identity & Authorization
About The Position
Baseten is hiring a Software Engineer for its founding identity and authorization team within enterprise engineering. The role owns the identity and access layer of the Baseten platform, including its authorization model, credential systems, and administrative experiences for enterprise IT teams. The engineer will build a fine-grained authorization system from the ground up, supporting current customer workflows while enabling precise access management as the platform grows. The system must provide low-latency permission checks at high request volume, consistent behavior across products, and strong security guarantees for mission-critical and highly regulated workloads. Example initiatives include fine-grained permissions for users, service accounts, and agentic workloads; short-lived, workload-based credentials for programmatic authentication; narrowly scoped agent credentials; enterprise identity lifecycle features such as single sign-on, SCIM provisioning, and organization-specific session expiry; and centralized administrative controls for visibility, auditability, and governance. The engineer will lead projects from problem definition through design, implementation, launch, and iteration; develop authorization and credential models; work with product, design, and customer-facing teams; establish engineering practices; and provide technical leadership and mentorship as the team grows.
Requirements
- 4–5+ years of experience building production backend systems.
- Hands-on experience designing and implementing a product authorization system, such as per-resource or per-object permissions, relationship-based access control, a policy engine, or a fine-grained authorization system in the style of Zanzibar, OpenFGA, SpiceDB, or Cedar.
- Demonstrated end-to-end ownership of a system, from initial design through implementation, production rollout, and iteration with users.
- Experience developing and operating multi-tenant systems at scale, where authorization checks are in the request path and latency and consistency matter.
- Comfort working across the full stack, from product and application code to cloud and Kubernetes infrastructure.
Nice To Haves
- Experience with Python and Go.
- Experience running an OpenFGA, SpiceDB, or similar deployment in production beyond a proof of concept.
- Working knowledge of OAuth, OIDC, and SCIM at the protocol level.
Responsibilities
- Lead identity and authorization projects from problem definition and technical design through implementation, launch, and iteration.
- Design authorization and credential models that support current critical user workflows and can be safely extended as the platform evolves.
- Partner with product, design, and customer-facing teams to turn enterprise security requirements into durable technical solutions.
- Establish engineering practices for quality, security, observability, and operational ownership.
- Provide technical leadership and mentorship as the team grows.
Benefits
- Competitive compensation, including meaningful equity.
- For U.S. employees: 100% coverage of medical, dental, and vision insurance for employees and dependents.
- Flexible PTO policy, including company-wide Winter Break, when offices are closed from Christmas Eve to New Year's Day.
- Paid parental leave.
- Fertility and family-building stipend through Carrot.
- For U.S. employees: company-facilitated 401(k).
- Exposure to a variety of ML startups, offering learning and networking opportunities.
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Mid Level
Education Level
No Education Listed
