Software Engineer, Identity Platform

🕒 October 21

🇺🇸 United States – Remote

💵 $215k - $285k / year

⏰ Full Time

🟡 Mid-level

🟠 Senior

🧑‍💻 Full-stack Engineer

👻 Ghost score 1%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

OpenRouter

WebsiteLinkedInAll Job Openings

1 - 10 employees

Founded 2023

💼 Consulting

📣 Marketing

🤖 Artificial Intelligence

Consulting • Marketing • Artificial Intelligence

OpenRouter is a platform providing a unified interface for interacting with various large language models (LLMs). It focuses on delivering better prices and uptime without the need for subscriptions. The platform supports multiple AI tasks and showcases models like Mistral Small 3 and DeepSeek R1 Distill Qwen 32B, which are designed for fast performance and high accuracy. OpenRouter also features gaming and coding tools that enhance usability across different sectors such as marketing, finance, and education.

📋 Description

• Unify API keys, management keys, browser sessions, OAuth/OIDC tokens and MCP logins under a single principal and authorization model • Own sign-in, MFA, passkeys, enterprise SSO, credential scoping, expiration, rotation and revocation • Build delegated access for applications and agents, including OpenRouter sign-in, OAuth for MCP clients, dynamic client registration and revocable consent grants • Implement workload identity federation and short-lived credentials for CI pipelines, cloud workloads and internal services • Build composable, deny-by-default authorization across organizations, workspaces, roles, automation keys and custom roles • Deliver SCIM provisioning, group-to-role mapping, domain verification and self-serve SSO integrations • Define the identity data model for users, organizations, workspaces, memberships, apps and guardrails • Develop identity fraud detection, KYC and verification flows, step-up checks, account-takeover defenses and abuse signals • Ensure credential provenance, explainable access decisions, audit logging, high availability and fast authentication on inference-request paths • Partner with Trust & Safety, Money, Product, Sales and Customer Success on fraud, verification, onboarding, security reviews and SSO rollouts

🎯 Requirements

• 5+ years building production identity, authentication or authorization systems at a SaaS, developer-platform or security company • Deep fluency in OAuth 2.x, including PKCE, token exchange and dynamic client registration • Deep fluency in OIDC, SAML, SCIM and JWTs • Experience designing RBAC, ABAC or ReBAC authorization models for multi-tenant B2B products • Experience migrating a live system from ad-hoc checks to a unified authorization model • Hands-on experience integrating Okta, Entra ID and Google Workspace • Experience with an auth platform such as Clerk, Auth0, WorkOS or similar • Strong TypeScript and SQL • Comfortable with Postgres and low-latency, cache-heavy services on a critical request path • Security mindset with threat modeling and least-privilege design • Ability to explain security decisions to enterprise security reviewers • Ability to work cross-functionally with Trust & Safety, Money, Product, Sales and CS • High agency and AI-forward approach; use of coding agents daily • Nice to have: enterprise SSO and SCIM, workload identity federation, OAuth/consent/delegation for AI agents or MCP clients, identity verification/KYC/fraud and risk systems, policy engines or fine-grained authorization, SOC 2/ISO 27001 compliance, AI tooling projects

🏖️ Benefits

• Equity offered