Senior Engineer, Agentic Identity
Build production cryptographic identity infrastructure for AI agents, owning issuer, verification, Passport, or audit-log capabilities. The role requires strong Python or Go expertise, experience shipping security-critical identity systems, and deep familiarity with RFC-driven protocols and asynchronous Python services.
About the job
Responsibilities
- Build and maintain the runtime issuer/mint, including OAuth Token Exchange (RFC 8693), JWS credentials (RFC 7515/7519, SD-JWT-VC), and a Merkle audit log with real-time revocation.
- Own and evolve wire formats and claim registries, including JWT profiles, verification-level and verification-method enums, and eIDAS/NIST IAL/FATF CDD crosswalks.
- Implement sub-millisecond JWS verification and Web Bot Auth signature checks (RFC 9421) at the HTTP edge for CDNs, merchants, and publisher paywalls.
- Build and maintain Passport, including canonical handles, KYC/KYB records, authorized operators, audit feeds, and authenticator binding.
- Develop operator integrations with embedded KYB onboarding, OAuth 2.0 consent, per-operator opt-in, and Svix webhook delivery.
- Work in a Python 3.13 monorepo using FastAPI, Cloud Tasks, Cloud Run, and SQLModel/SQLAlchemy, plus Go for performance-critical substrate components.
Requirements
- Shipped systems where cryptographic correctness was load-bearing, such as OAuth/OIDC identity providers, token issuers, signing services, HSM-backed signers, or passkey/WebAuthn flows.
- Fluency in Python and Go, or strong proficiency in one with a demonstrated ability to learn the other quickly.
- Ability to read RFCs as primary sources and form informed opinions on JWK thumbprint canonicalization, pairwise subject derivation, and Signature-Input header serialization.
- Deep understanding of identity versus authorization, mandate versus claim, and snapshot versus live state.
- Production experience with asynchronous Python and PostgreSQL, including migration safety and observability.
Nice to Have
- Verifiable credentials, SSI, DID, SD-JWT-VC, OID4VC, or W3C VC experience.
- Certificate Transparency, Trillian, or similar append-only log experience.
- KYC/KYB pipeline experience, including provider abstraction, evidence retention, regulatory level mapping, and ownership-chain resolution.
- Edge/CDN engineering with Cloudflare Workers, Fastly Compute, Envoy filters, or mTLS at the edge.
- Familiarity with AP2, x402, MPP, UCP, or Mastercard VI specifications.
Compensation and Benefits
- Salary: $230,000–$340,000 plus equity.
- Flexible PTO.
- 100% company-paid health, dental, and vision premiums.
- 401(k) with company match.
- HSA contributions on applicable plans.
- $250 monthly gym stipend.
Skills
Python, Go, Oauth 2.0, Openid Connect, Jws, Sd-Jwt-Vc, Webauthn, FastAPI, Postgres, Google Cloud Run, Sqlalchemy, Merkle Trees, Kubernetes
Similar jobs
Backend Engineering jobs
Gusto
New York, NYBuild and scale Gusto’s Payments platform, designing fault-tolerant distributed systems and guiding large technical projects end to end. The role requires 7+ years of experience, strong architectural judgment, and expertise with production software; payments or accounting experience is preferred.
Stripe
South San Francisco, CA
Senior Software Engineer designing and operating high-scale distributed systems and core networking infrastructure for internal product teams. Requires a bachelor’s degree and 5 years of software engineering experience, or a master’s degree with 3 years, plus strong cloud, Java, Go, and Kubernetes expertise.
Replit
Foster City, CA
Build agentic growth and marketing infrastructure spanning attribution, audiences, lifecycle engagement, referrals, promotions, web, mobile, billing, and data. The role requires strong backend software engineering, SQL and data warehouse expertise, and close collaboration with go-to-market teams.
Scale AI
San Francisco, CASenior Software Engineer on the Platform Engineering team, designing and building shared data platforms, cloud infrastructure, orchestration systems, and developer tooling. Requires backend engineering experience, distributed systems expertise, and proficiency with cloud, containerization, databases, and CI/CD.
Parafin
San Francisco, CA
Build and own backend platform infrastructure that enables engineering teams to develop and ship lending products quickly and reliably. The role requires 5+ years of backend experience, strong ownership, and effective cross-functional collaboration.