Software Engineer, Identity Platform

Location: Remote (US)

Salary: $215K–$285K annually plus equity.

Company

hirify.global provides an AI routing and infrastructure layer for enterprises to access, manage, and optimize large language models across providers.

What you will do

• Build and own identity across the inference gateway, marketplace, and agentic products, including authentication, authorization, credential lifecycle, and the core identity model.
• Unify API keys, browser sessions, OAuth, OIDC, and MCP logins under a single principal and authorization model, including MFA, passkeys, enterprise SSO, scoped credentials, expiration, rotation, and revocation.
• Build delegated access for applications and agents, including hirify.global sign-in, OAuth for MCP clients, dynamic client registration, and revocable consent grants.
• Implement workload identity federation and secretless authentication for CI pipelines, cloud workloads, and internal services.
• Develop enterprise provisioning with SCIM, group-to-role mapping, domain verification, self-serve SSO, and integrations with Okta, Entra ID, Google Workspace, and partner platforms.
• Protect users and data through fraud detection, KYC and verification flows, step-up checks, account-takeover defenses, least-privilege access, auditability, and highly available low-latency authorization on inference requests.

Requirements

• 5+ years of production experience building identity, authentication, or authorization systems at a SaaS, developer-platform, or security company.
• Deep fluency in OAuth 2.x, including PKCE, token exchange, and dynamic client registration; OIDC, SAML, SCIM, and JWTs.
• Experience designing RBAC, ABAC, or ReBAC authorization models for multi-tenant B2B products, including migrating live systems from ad-hoc checks to a unified model.
• Hands-on experience integrating Okta, Entra ID, Google Workspace, and an authentication platform such as Clerk, Auth0, WorkOS, or similar.
• Strong TypeScript and SQL skills, with experience using Postgres and building low-latency, cache-heavy services on critical request paths.
• Security mindset with experience using threat models, designing for least privilege, and explaining decisions to enterprise security reviewers.
• Ability to work cross-functionally with Trust & Safety, Money, Product, Sales, and Customer Success on enterprise security, onboarding, fraud, abuse, and SSO requirements.
• High agency, an AI-forward approach, daily use of coding agents, and interest in automating manual security and onboarding work.

Nice to have

• Shipped enterprise SSO and SCIM that passed customer security reviews.
• Built workload identity federation or secretless authentication for CI and cloud workloads.
• Built OAuth, consent, and delegation for AI agents or MCP clients acting on behalf of users.
• Experience with identity verification, KYC, fraud, or risk systems such as Stripe Identity, Persona, or Sift.
• Experience with policy engines or fine-grained authorization, including OpenFGA, Cedar, OPA, or Zanzibar-style systems.
• Experience helping a company achieve SOC 2, ISO 27001, or similar compliance.
• Existing hirify.global usage or projects in AI tooling.

Culture & Benefits

• Remote work in the US.
• Full-time employment with $215K–$285K annual compensation and equity.
• Cross-functional collaboration with Trust & Safety, Money, Product, Sales, and Customer Success.
• AI-forward engineering culture focused on automation and reducing manual security and onboarding work.