Software Engineer - Identity & Authorization
Remote • San Francisco • FullTime
Posted 11d ago
Remote Work Policy
Fully remote
Employment Type
FullTime
Categories
Applied AI Engineer
About the job
Baseten powers mission-critical inference for leading AI companies, enabling them to bring cutting-edge models into production. We are seeking a founding engineer for our identity and authorization team within enterprise engineering. This role will own the identity and access layer of the Baseten platform, including the authorization model, credential systems, and admin experiences for enterprise IT teams. You will design and build a fine-grained authorization system from the ground up, ensuring low-latency permission checks at high request volumes, consistent behavior across the product suite, and strong security guarantees for critical workloads.
Responsibilities
- Lead identity and authorization projects from conception through launch and iteration.
- Design authorization and credential models to support current user workflows and future platform evolution.
- Collaborate with product, design, and customer-facing teams to translate enterprise security requirements into technical solutions.
- Establish engineering practices for quality, security, observability, and operational ownership.
- Provide technical leadership and mentorship to a growing team.
Requirements
- 4-5+ years of experience building production backend systems, including designing and implementing product authorization systems (e.g., per-resource/object permissions, relationship-based access control, policy engines, or fine-grained authorization systems like Zanzibar, OpenFGA, SpiceDB, or Cedar).
- Demonstrated end-to-end ownership of systems from design through production rollout and iteration.
- Experience developing and operating multi-tenant systems at scale where authorization checks are in the request path and latency/consistency are critical.
- Comfort working across the full stack, including product code, application code, cloud, and Kubernetes infrastructure.
- Experience with Python and Go (preferred).
- Experience running OpenFGA, SpiceDB, or similar deployments in production (preferred).
- Working knowledge of OAuth, OIDC, and SCIM at the protocol level (preferred).
Benefits
- Competitive compensation and meaningful equity
- 100% coverage of medical, dental, and vision insurance for employee and dependents
- Flexible PTO policy including company-wide Winter Break
- Paid parental leave
- Fertility and family-building stipend
- Company-facilitated 401(k)
- Exposure to a variety of ML startups for learning and networking