# Software Engineer - Identity and Authorization

**Company:** [Baseten](https://hotfix.jobs/companies/baseten)
**Location:** San Francisco, CA, Toronto, Canada, New York, NY, Montreal, Canada
**Role:** Backend Engineering
**Salary:** $240k – $285k/yr
**Experience:** 5+ years
**Skills:** Backend Systems, Authorization, Access Control, Policy Engines, Openfga, Spicedb, Cedar, Python, Go, OAuth, OIDC, SCIM, Kubernetes, Cloud Infrastructure, Multi-Tenant Systems
**Posted:** 2026-09-02

> Build and own Baseten’s identity and authorization platform, including fine-grained permissions, credential systems, and enterprise administration. The role requires backend systems experience, production authorization expertise, and the ability to operate secure multi-tenant systems at scale.

## Job Description

## Responsibilities
- Lead identity and authorization projects from problem definition and technical design through implementation, launch, and iteration.
- Design authorization and credential models supporting critical user workflows and safe platform evolution.
- Partner with product, design, and customer-facing teams to translate enterprise security requirements into durable technical solutions.
- Establish engineering practices for quality, security, observability, and operational ownership.
- Provide technical leadership and mentorship as the team grows.

## Requirements
- 4–5+ years of experience building production backend systems.
- Hands-on experience designing and implementing product authorization systems, including per-resource or per-object permissions, relationship-based access control, policy engines, or fine-grained authorization systems such as Zanzibar, OpenFGA, SpiceDB, or Cedar.
- Demonstrated end-to-end ownership from initial design through implementation, production rollout, and user-driven iteration.
- Experience developing and operating multi-tenant systems at scale where authorization checks are in the request path and latency and consistency matter.
- Comfort working across the stack, from product and application code through cloud and Kubernetes infrastructure.

## Preferred Qualifications
- Experience with Python and Go.
- Production experience operating OpenFGA, SpiceDB, or a similar system beyond a proof of concept.
- Working knowledge of OAuth, OIDC, and SCIM at the protocol level.

## Compensation and Benefits
- Competitive compensation, including meaningful equity.
- Medical, dental, and vision insurance fully covered for employees and dependents.
- Flexible paid time off and a company-wide winter break.
- Paid parental leave.
- Fertility and family-building stipend.
- Company-facilitated 401(k).

## Similar jobs

- [Software Engineer](https://hotfix.jobs/jobs/6a07ad4a-8519-4cf3-8100-9d81f075ffb5) - Stripe - Seattle, WA - $235k – $286k/yr
- [Software Engineer, Financial Engineering](https://hotfix.jobs/jobs/61a986e9-48dc-4bc5-a815-307ac6889353) - OpenAI - San Francisco, CA - $230k – $385k/yr
- [Product Engineer, Ona](https://hotfix.jobs/jobs/fced2e7b-d946-44bb-8c1c-50640be580c3) - OpenAI - San Francisco, CA - $255k – $445k/yr
- [Platform Engineer](https://hotfix.jobs/jobs/ba7cacc6-77c9-41bf-9c28-55e1e217737e) - Fluidstack - San Francisco, CA - $224k – $279k/yr
- [Software Engineer - Wallets](https://hotfix.jobs/jobs/32955ac3-4c1c-4a94-83a2-7e6f18965180) - Rain - Remote - $220k – $270k/yr

**Apply:** https://hotfix.jobs/jobs/e15f1f39-fea6-4109-b3d1-9d7ca030d633
**Canonical:** https://hotfix.jobs/jobs/e15f1f39-fea6-4109-b3d1-9d7ca030d633