Software Engineer Authorization Infrastructure Manager Jobs

Squarespace is looking for a frontend-focused engineer who enjoys owning features end-to-end. While your expertise is building exceptional user experiences, you're comfortable working across the stack to deliver secure, scalable identity solutions. You will join the Identity & Access Management (IAM) team, where we architect the mission-critical authentication, authorization, and account security frameworks that safeguard millions of users worldwide. We own the systems powering sign-in, sign-up, account recovery, multi-factor authentication, passkeys, OAuth, and identity verification. Our mission is to make security seamless - creating intuitive user experiences while building highly reliable and secure backend systems. If you are a Frontend Engineer who strives to go beyond what is possible in a web browser, we want to hear from you! You will report to the Engineering Manager in our New York City headquarters. You'll Get To... Work with a wide range of systems, processes, and technologies to own and solve problems across all business units. Build elegant user experiences that enable Squarespace teams to easily add authentication, authorizations and security features to products and services. Collaborate with stakeholders across the organization such as product, design, infrastructure, platform, data, security and legal. Help define frontend architecture, engineering standards, testing strategies, and developer experience. Integrate frontend applications with OAuth, OIDC, session management, and authorization services. Who We're Looking For 3+ years of software development experience, with an emphasis on modern frontend technologies (HTML/CSS/TypeScript/React) and building delightful user interfaces. Extensive experience developing large-scale application software Are motivated by solving hard problems, and measure your success in terms of impact doing so. Have experience and interest in contributing to services around OAuth, WebAuthN, IdentityProviders, Identit

We believe that the way people interact with their finances will drastically improve in the next few years. We’re dedicated to empowering this transformation by building the tools and experiences that thousands of developers use to create their own products. Plaid powers the tools millions of people rely on to live a healthier financial life. We work with thousands of companies like Venmo, SoFi, several of the Fortune 500, and many of the largest banks to make it easy for people to connect their financial accounts to the apps and services they want to use. Plaid’s network covers 12,000 financial institutions across the US, Canada, UK and Europe. Founded in 2013, the company is headquartered in San Francisco with offices in New York, Washington D.C., London and Amsterdam. Security Engineering is the engineering function inside the Plaid security org that focuses on developing the industry-leading security systems and infrastructure. Security Engineering owns most of Plaid’s security-related infrastructure: secure data storage, key management systems, internal identity platform, internal authentication systems, internal permission management, and internal authorization service. We develop solutions across data encryption, key management, access control, and data loss prevention to protect sensitive consumer data. We believe in the Zero Trust security model and are always looking for ways to improve our authentication and access control platforms. About the role: You will develop security capabilities to secure Plaid infrastructure and sensitive data access. You will lead the team’s strategic planning in collaboration with the manager and other senior engineers. You will own, maintain, and build Plaid’s security infrastructure and services like IAM Gateway, Key Management System and Network Firewall. You will consult with product engineers to ensure Plaid services meet security standards. You will help educate and support other engineering teams to improve security in

Replit is the agentic software creation platform that enables anyone to build applications using natural language. With millions of users worldwide, Replit is democratizing software development by removing traditional barriers to application creation. About the Role Join our Enterprise Platform team and build the infrastructure foundations that enable the world's largest organizations to run Replit within their security and compliance boundaries. As a Software Engineer on this team, you'll design and implement the deployment flexibility, networking capabilities, authorization systems, and data controls that enterprises require, from single-tenant architectures and private connectivity to custom policy enforcement and customer-managed encryption. You'll work at the intersection of cloud infrastructure and enterprise requirements, partnering with Platform Engineering, Security, and Sales to ship capabilities that unlock adoption at demanding organizations. What You'll Do Build enterprise deployment infrastructure: Design and implement single-tenant and dedicated deployment options, enabling customers to run Replit with the isolation guarantees their security posture requires. Implement private networking capabilities: Build VPC peering, private connectivity, and static IP configurations that allow enterprises to integrate Replit into their existing network architectures. Design authorization services: Build the authorization infrastructure that enforces custom enterprise policies; enabling fine-grained access controls, custom permission models, and policy enforcement that integrates with customers' existing identity and governance systems. Ship data protection features: Implement bring-your-own-key (BYOK) encryption, customer-managed keys, and data residency controls that give enterprises ownership over their most sensitive data. Develop infrastructure automation: Write Terraform modules and automation that enable reliable, repeatable enterprise deployments across reg

Replit is the agentic software creation platform that enables anyone to build applications using natural language. With millions of users worldwide, Replit is democratizing software development by removing traditional barriers to application creation. About the Role Join our Enterprise Platform team and build the infrastructure foundations that enable the world's largest organizations to run Replit within their security and compliance boundaries. As a Software Engineer on this team, you'll design and implement the deployment flexibility, networking capabilities, authorization systems, and data controls that enterprises require, from single-tenant architectures and private connectivity to custom policy enforcement and customer-managed encryption. You'll work at the intersection of cloud infrastructure and enterprise requirements, partnering with Platform Engineering, Security, and Sales to ship capabilities that unlock adoption at demanding organizations. What You'll Do Build enterprise deployment infrastructure: Design and implement single-tenant and dedicated deployment options, enabling customers to run Replit with the isolation guarantees their security posture requires. Implement private networking capabilities: Build VPC peering, private connectivity, and static IP configurations that allow enterprises to integrate Replit into their existing network architectures. Design authorization services: Build the authorization infrastructure that enforces custom enterprise policies; enabling fine-grained access controls, custom permission models, and policy enforcement that integrates with customers' existing identity and governance systems. Ship data protection features: Implement bring-your-own-key (BYOK) encryption, customer-managed keys, and data residency controls that give enterprises ownership over their most sensitive data. Develop infrastructure automation: Write Terraform modules and automation that enable reliable, repeatable enterprise deployments across reg

ABOUT BASETEN Baseten powers mission-critical inference for the world's most dynamic AI companies, like Cursor, Notion, OpenEvidence, Abridge, Clay, Gamma, and Writer. By uniting applied AI research, flexible infrastructure, and seamless developer tooling, we enable companies operating at the frontier of AI to bring cutting-edge models into production. We're growing quickly and recently raised our $1.5B Series F , led by Altimeter Capital, Conviction Partners, and Spark Capital. Join us and help build the platform engineers turn to ship AI products. THE ROLE The largest, most demanding enterprises run on Baseten, and they bring exacting requirements for how people, services, and agents access the platform. This is the founding role for our identity and authorization team within enterprise engineering. You'll own the identity and access layer of the Baseten platform: the authorization model, credential systems, and admin experiences that enterprise IT teams use to govern access for organizations like Harvey, HubSpot, and Notion. You'll design and build Baseten's fine-grained authorization system from the ground up to support the workflows customers depend on today while giving them cleaner, more precise ways to manage access as the platform grows. Authorization at Baseten requires low-latency permission checks at high request volume, consistent contracts and behaviors across the product suite, and strong security guarantees for mission-critical, highly regulated workloads. EXAMPLE INITIATIVES Recent and upcoming work in this area: Fine-grained authorization for users, service accounts, and agentic workloads: per-resource permissions at the organization, team, and workload scope to support both common workflows and complex enterprise access policies Programmatic authentication allowing high-compliance customers to connect service principles securely via short-lived, workload-based credentials Agent credentials that grant an agent exactly the access it needs for the gi

Who We Are Notion is the collaborative AI workspace where teams and agents think together . We're building one place where your knowledge, projects, meetings, and AI tools live side by side, so work is faster, clearer, and less fragmented. Millions of individuals, small teams, and large companies run their work on Notion. Notinos (our employees) are customer zero in bringing this future of work to life. We care about craft, building things that last, and the belief that great work is still fundamentally human. Our goal isn’t to ship the next feature. Each and every team of Notinos is working to set the standard for how humans work together in the AI era. From building a business’s system of record to making and managing AI agents to automating away the busy work, we care deeply about giving our customers more time for their life’s work. About the Role: Millions of people use Notion every day, and we’re growing quickly. The Infrastructure Security team’s mission is to build a secure-by-default foundation across Notion’s technical stacks—architecting systems that make the secure path the easy path. As an IC4 on this team, you’ll own meaningful infrastructure security problems end-to-end: from identifying risk, to designing pragmatic controls, to shipping secure defaults that scale across engineering. This role can be based in either San Francisco or New York City. We work from our offices on Mondays, Tuesdays and Thursdays (our Anchor Days) because we do our best thinking and building together in person. We’re looking for someone who’s excited to work alongside the team during those days. What You'll Achieve: Proactively enhance the security posture of our AWS accounts and cloud infrastructure. Create secure frameworks for secrets management and authentication/authorization. Design and deploy robust Identity and Access Management (IAM) solutions. Provide guidance and education on security and privacy best practices to cross-functional partners. Participate in (and hel

Join us in building the future of finance. Our mission is to democratize finance for all. An estimated $124 trillion of assets will be inherited by younger generations in the next two decades. The largest transfer of wealth in human history. If you’re ready to be at the epicenter of this historic cultural and financial shift, keep reading. About the Role + Team The Security Engineering team builds the identity and access control plane governing how employees, services, and agentic workloads access Robinhood’s critical infrastructure. We are a platform-building engineering team focused on creating secure, frictionless, and automated self-service access systems at scale. As a Staff Software Engineer on this team, you will shape Robinhood’s foundational identity architecture, define technical strategy, and build Tier-0 access infrastructure used across the entire company! From solving complex authentication and authorization challenges to setting secure guardrails for emerging AI and agentic workflows, your technical leadership will directly impact every product team at Robinhood! What You'll Do Access Control Plane Architecture: Define and build the core technical architecture for managing employee, service, non-human, and agentic access across company-wide resources Tier-0 Platform Engineering: Design, build, and operate highly available, resilient, and observable backend identity infrastructure using Go, Python, Rust, or comparable systems languages. AuthN & AuthZ Solutions: Implement modern identity protocols and access frameworks (OAuth 2.0, OpenID Connect, RBAC, ABAC, and policy-based access controls). AI & Agentic Access Governance: Develop secure access patterns, identity frameworks, governance, and observability guardrails for AI agents, LLM applications, and Model Context Protocol (MCP) systems. Self-Service Developer Experience: Create automated, developer-friendly platforms that allow teams to request, approve, provision, and audit access without ma

About the Team Security is at the foundation of OpenAI’s mission to ensure that artificial general intelligence benefits all of humanity. The Identity Infrastructure Engineering team sits at the core of this effort, designing and building the identity and access management solutions that protect our model weights, customer data, and critical systems across multiple cloud environments. We partner with teams across OpenAI—Applied Engineering, Research, IT, and Security—to provide a secure and scalable platform for permissioning, orchestration, and innovative AI research. About the Role We’re looking for a Staff+ Software Engineer to help build and evolve the identity infrastructure that supports OpenAI’s research, engineering, and internal platforms. This role sits at the intersection of cloud infrastructure, identity systems, and software engineering. You’ll work across production systems, infrastructure-as-code, cloud control planes, identity providers, and operational infrastructure to build secure, scalable, and reliable systems used broadly across the company. The ideal candidate has experience building and operating large-scale, mission-critical systems with strong reliability and security requirements, and is comfortable writing production code, designing distributed systems, and driving ambiguous projects from 0 to 1 while building the operational rigor needed to run critical infrastructure over time. In this role, you will: Lead the architecture, development, and operation of identity infrastructure that spans cloud platforms, internal systems, and critical engineering services. Design and evolve systems for authentication, authorization, access governance, auditability, and policy enforcement with a strong focus on reliability, scalability, and secure-by-default design. Build foundational infrastructure and platform capabilities that are broadly used across engineering, research, and security teams. Improve the reliability, observability, performance, and op

Who We Are Addepar is a global data and AI platform empowering investment professionals to turn complex financial information into actionable intelligence. Addepar unifies portfolio, market and client data in a total portfolio view and delivers AI-powered insights within investment and client workflows. More than 1,400 firms in nearly 60 countries use Addepar to manage and advise on nearly $9 trillion in assets. Its open platform integrates with nearly 650 software, data and consulting partners to power end-to-end investment operations across firms of all sizes and complexity. Addepar supports clients worldwide with offices in New York City, Salt Lake City, London, Edinburgh, Pune, Dubai, Geneva, Singapore and São Paulo. The Role We are currently seeking a Staff Software Engineer, Infrastructure to join the AI Platform team that powers seamless insights and interaction through natural language and data intelligence across our AI products. As a Staff Software Engineer, you’ll architect, build, and operate the backend and platform systems that power AI Platform. You’ll work across service design, distributed systems, cloud infrastructure, event-driven processing, observability, CI/CD, and production reliability, helping shape the technical direction of a platform that supports scalable, client-facing AI experiences. This role requires a strong software engineering foundation combined with deep infrastructure and systems thinking. We are looking for an engineer who can write high-quality production code, make sound architectural tradeoffs, and own platform capabilities end-to-end — not someone focused only on scripting, cloud configuration, or infrastructure tooling in isolation. You will collaborate closely with frontend, product, and AI/ML engineers to deliver reliable, secure, and scalable systems that align with Addepar’s standards of performance, resilience, and trust. Applicants must have legal authorization to work in the country where this role is based o

Everpure (NYSE: P) has evolved from storage pioneer to data platform, closing fiscal 2026 with $3.7 billion in revenue, its first billion-dollar quarter, and accelerating growth into FY27. Our strategic agenda spans the companies defining the next era of technology - hyperscalers, AI labs, the AI hardware supply chain, data platform providers, and the broader AI ecosystem. This type of work—work that changes the world—is what the tech industry was founded on. So, if you're ready to seize the endless opportunities and leave your mark, come join us. THE ROLE As a Software Engineer on the DX Security Components team , you will architect the backend services that safeguard Pure’s core authentication and remote access infrastructure. You’ll act as a security-minded engineer within a high-impact platform team, ensuring our cloud offerings and customer appliances remain auditable and resilient. Collaborating across the DX organization, you will bridge the gap between robust security protocols and seamless developer integration to protect our global customer base. WHAT YOU’LL DO Engineer Security Infrastructure: Design and operate high-availability backend services that manage authentication, authorization, and certificate lifecycles to ensure secure access across all Pure1 cloud and appliance environments. Drive End-to-End Ownership: Lead the full service lifecycle—from initial architectural design and threat modeling (STRIDE) to deployment, observability, and long-term cost efficiency. Champion Secure Integration: Partner with Security Governance and product teams to streamline remote-access flows, translating complex security requirements into pragmatic, automated workflows for other engineering squads. Ensure System Resilience: Maintain the integrity of security-sensitive systems by participating in a global follow-the-sun on-call rotation, performing root-cause analysis, and hardening infrastructure against emerging threats. Automate Trust: Evolve Infrastructure as Cod

About Ramp Ramp is building the smart infrastructure for finance teams, embedded in the transaction flow of every dollar a business spends. We automate how over $200B in annualized spend flows in and out of 70,000+ companies: authorizing payments, flagging risk, categorizing spend, and closing books. The problems are high-stakes, data-dense, and unforgiving. We hire people with high agency and high urgency. We look for slope over intercept. We care less about where you trained and more about what you’ve built. At Ramp, everyone is a builder who owns problems end to end and makes consequential decisions that shape the outcome. The median Ramp customer saves 5% and grows revenue 16% in their first year – far in excess of businesses operating without Ramp. We believe every ambitious company deserves the same. If you want to build systems that directly shape how companies move and manage billions, Ramp is the place to do it. About the Role We are hiring a Software Engineer to build systems across Fraud, UIM (User & Identity Management), and Identity. This role sits at the intersection of security, risk decisioning, and product experience. You will help build detection and enforcement capabilities for fraud and account takeover, as well as the identity primitives that power authentication, authorization, and safe account access. This work is deeply cross-functional. You will partner closely with Fraud Ops, Risk Strategy, Security, Product, and Data to ship improvements that are measurable in loss reduction, attack containment, and user experience. What You’ll Do Build and evolve backend services that detect and prevent fraud across multiple surfaces, including account access and money movement. Develop enforcement and response tooling that enables fast, safe actions such as identity locks, business locks, payment freezes, and other containment levers. Improve protections against account takeover (ATO), including risk-based step-ups, monitoring, and targeted friction

Who we are About Stripe Stripe is a financial infrastructure platform for businesses. Millions of companies—from the world's largest enterprises to the most ambitious startups—use Stripe to accept payments, grow their revenue, and accelerate new business opportunities. Our mission is to increase the GDP of the internet, and we have a staggering amount of work ahead. That means you have an unprecedented opportunity to put the global economy within everyone's reach while doing the most important work of your career. About the team The Issuing team owns the Stripe card issuing product end to end from the APIs and backend services that power spend cards, debit cards, and charge cards, to the dashboard and embedded components that businesses use to manage their card programs. We build the infrastructure and interfaces that let platforms and businesses instantly create, distribute, and control payment cards at scale, and we're responsible for the full cardholder lifecycle across commercial and consumer issuing. We're at an inflection point. Issuing is expanding into new geographies, new card categories (stablecoin, healthcare, consumer credit), and deeper partnerships with major platforms. This is a high-impact, high-visibility role at the intersection of financial infrastructure, developer-facing APIs, and end-user product experience, and it requires someone who can lead technically across a complex, fast-moving domain. What you'll do Define and drive the technical strategy for Issuing, including multi-year architecture decisions across backend services, APIs, and user-facing surfaces. Own end-to-end technical solutions for critical systems, authorization flows, spending controls, cardholder management, and card program configuration, ensuring they are reliable, scalable, and operationally sound. Identify and lead infrastructure investments that unlock new issuing models, including geographic expansion, new card program types, and platform-level extensibility

Senior Software Engineer (Backend) About Team Cloud Platform Engineering group designs, builds and manages platforms that allow Myntra’s tech product to be secured, reliable, deployed and run at scale. These horizontal platforms leverage cloud hosting platforms and ensure all Myntra’s hostings are agnostic to Cloud vendor. We also build a number of production automation like provisioning of infrastructure at scale and manage complex access management on servers. We have developed numerous in-house tools and platform for load/stress testing, zero trust, security and compliance, CI/CD, Observability at scale. And, we aggressively adopt from open sources and try to contribute back to the community. Tools and Platform Engineering This team builds and maintains centralized and high-scale platforms for Observability (centralized log collection, metric systems, monitoring systems), Security & Compliance (access management, secret management, database access, change management systems, Authentication and Authorization of services etc). The platforms developed by these teams are centralized tools used by all engineering teams for database access, and changes, infrastructure provisioning, on-call scheduling, onboarding new monitoring etc. The vault system and APIs, developed, deployed and managed by this team, is being used by all Myntra’s production services. This team consists of full-stack developers who are skilled in Python, Golang, ReactJs. Roles and Responsibilities Design, build and maintain central platform products to improve the security posture of Myntra Write maintainable, scalable, and efficient code. Design and architect technical solutions for the developer community at Myntra Work in a cross-functional team, collaborating with peers during the entire SDLC. Follow coding standards, code reviews, etc. Follow scrum sprint cycles and commitment to deadlines. Identify security gaps in or for software platforms and incorporate them into requirements

Secure Every Identity, from AI to Human Identity is the key to unlocking the potential of AI. Okta secures AI by building the trusted, neutral infrastructure that enables organizations to safely embrace this new era. This work requires a relentless drive to solve complex challenges with real-world stakes. We are looking for builders and owners who operate with speed and urgency and execute with excellence. This is an opportunity to do career-defining work. We're all in on this mission. If you are too, let's talk. Secure Every Identity, from AI to Human Identity is the key to unlocking the potential of AI. Okta secures AI by building the trusted, neutral infrastructure that enables organizations to safely embrace this new era. This work requires a relentless drive to solve complex challenges with real-world stakes. We are looking for builders and owners who operate with speed and urgency and execute with excellence. This is an opportunity to do career-defining work. We're all in on this mission. If you are too, let's talk. The Product Okta's Auth0 is an easy-to-implement authentication and authorization platform designed by developers for developers. We make access to applications safe, secure, and seamless for the more than 100 million daily logins around the world. Our modern approach to identity enables this Tier-0 global service to deliver convenience, privacy, and security so customers can focus on innovation. The Team The Enterprise Management team provides enterprise-ready, centralized governance of the Auth0 resources our customers build on tenants, teams, and dashboard users under a single pane of glass. As customer environments grow in scale and complexity, we ensure secure, autonomous, and frictionless access through tenant-level transparency and access controls that meet or exceed their security policies. We own the full lifecycle of tenants and teams, the management dashboards, and the public APIs that enable enterprise customers to programmatically gove

Secure Every Identity, from AI to Human Identity is the key to unlocking the potential of AI. Okta secures AI by building the trusted, neutral infrastructure that enables organizations to safely embrace this new era. This work requires a relentless drive to solve complex challenges with real-world stakes. We are looking for builders and owners who operate with speed and urgency and execute with excellence. This is an opportunity to do career-defining work. We're all in on this mission. If you are too, let's talk. Staff Software Engineer (Full Stack - Backend) Staff Software Engineer The Product Auth0 is a developer-friendly identity platform designed by developers, for developers, simplifying authentication and authorization for more than 100 million daily logins worldwide. Within this global platform, our team drives two of Auth0’s most critical, high-impact surfaces: The Manage Dashboard: The definitive front door for developers and enterprise administrators worldwide. It is the control center where our customers configure critical identity policies, manage complex organizations, and monitor active threat intelligence. The Auth0 Marketplace: Our rapidly expanding extensibility ecosystem. The Marketplace allows customers to seamlessly discover and install third-party integrations - such as security monitoring, consent management, and database connectors - to dynamically customize their identity pipeline. The Role As a Staff Engineer on this team, you will not just write code; you will own the technical strategy, architect highly resilient frameworks, design developer-friendly APIs, and mentor a high-performing team of engineers. Your architectural ownership will span the entire stack - from the React-based frontend down through our Node.js/Go services, robust operational pipelines, and PostgreSQL databases. What You Will Do: Product Ownership: Lead the technical lifecycle of your team’s products, ensuring they are robust, secure, and performant from the frontend to