Backend Engineer, Identity and Authorization

Location: Hybrid in San Francisco, Montreal, New York, Seattle, or Toronto

Salary: $165K–$330K annually, plus equity

Company

Baseten provides mission-critical inference infrastructure and developer tooling for AI companies, helping customers bring advanced models into production.

What you will do

• Lead identity and authorization projects from problem definition and technical design through implementation, launch, and iteration.
• Design and build fine-grained authorization for users, service accounts, and agentic workloads across organization, team, and workload scopes.
• Develop credential systems, including short-lived workload-based credentials and task-specific agent credentials.
• Build enterprise identity lifecycle and administration capabilities, including single sign-on, SCIM provisioning, session expiry, auditability, and governance.
• Partner with product, design, and customer-facing teams to translate enterprise security requirements into durable technical solutions.
• Establish practices for quality, security, observability, operational ownership, and technical mentorship.

Requirements

• 4–5+ years of experience building production backend systems, including hands-on design and implementation of a product authorization system. Relevant experience includes per-resource or per-object permissions, relationship-based access control, a policy engine, or fine-grained authorization systems such as Zanzibar, OpenFGA, SpiceDB, or Cedar.
• End-to-end ownership of a system from initial design through implementation, production rollout, and user-driven iteration.
• Experience developing and operating multi-tenant systems at scale where authorization checks are in the request path and latency and consistency matter.
• Comfort working across the full stack, from product and application code to cloud and Kubernetes infrastructure.

Nice to have

• Experience with Python and Go.
• Experience running OpenFGA, SpiceDB, or a similar authorization deployment in production beyond a proof of concept.
• Working knowledge of OAuth, OIDC, and SCIM at the protocol level.

Culture & Benefits

• Meaningful equity and competitive compensation.
• For U.S. employees and dependents: 100% coverage of medical, dental, and vision insurance.
• Flexible PTO and a company-wide Winter Break when offices are closed from Christmas Eve through New Year's Day.
• Paid parental leave and a fertility and family-building stipend through Carrot.
• For U.S. employees: company-facilitated 401(k).
• Exposure to a variety of machine learning startups and related learning and networking opportunities.