Senior Engineer, Agentic Identity

Location: San Francisco, California; hybrid with 4 days per week in the office

Salary: $230,000–$340,000 plus equity

Company

hirify.global is rebuilding identity infrastructure for US financial institutions by combining public records, IRS data, sanctions lists, web signals, and fraud telemetry into a business and human identity graph.

What you will do

• Build and maintain the runtime issuer/mint using OAuth Token Exchange, JWS credentials, SD-JWT-VC, and a Merkle audit log with real-time revocation.
• Own the wire format and claim registry, including JWT profiles, verification enums, and eIDAS/NIST IAL/FATF CDD crosswalks.
• Implement sub-millisecond JWS verification and Web Bot Auth signature checks at the HTTP edge.
• Build and maintain Passport with canonical handles, KYC/KYB records, authorized operators, audit feeds, and authenticator binding.
• Develop embedded KYB onboarding, operator opt-in, and webhook delivery via Svix.
• Work across a Python 3.13 monorepo and Go performance-critical substrate components using FastAPI, Cloud Tasks, Cloud Run, SQLModel/SQLAlchemy, and Postgres.

Requirements

• Shipped systems where cryptographic correctness was load-bearing, such as an OAuth/OIDC IdP, token issuer, signing service, HSM-backed signer, or passkey/WebAuthn flow.
• Fluent in Python and Go, or strong in one with a track record of learning the other quickly.
• Reads RFCs as primary sources and has informed opinions on JWK thumbprint canonicalization, pairwise-sub derivation, and Signature-Input header serialization.
• Deep understanding of identity versus authorization, mandate versus claim, and snapshot versus live state.
• Production experience with async Python on Postgres, including migration safety and observability.

Nice to have

• Verifiable credentials, SSI, DID, SD-JWT-VC, OID4VC, or W3C VC experience.
• Certificate Transparency, Trillian, or similar append-only-log experience.
• KYC/KYB pipeline experience, including provider abstraction, evidence retention, eIDAS/FATF CDD mapping, and ownership-chain resolution.
• Edge/CDN engineering with Cloudflare Workers, Fastly Compute, Envoy filters, or mTLS at the edge.
• Familiarity with AP2, x402, MPP, UCP, or Mastercard VI specifications.

Culture & Benefits

• Work in person in San Francisco 4 days per week with a small senior Agentic Economy team.
• Flexible PTO, 100% company-paid health, dental, and vision premiums, and HSA contributions on applicable plans.
• 401(k) with company match and a $250 monthly gym stipend.
• Lunch stipend, equity, and the opportunity to work alongside experienced founders and team members.
• Culture emphasizes transparency, radical candor, and giving team members a voice.