Backend Engineer - Identity & Access Platform

Speedrun Talent Network; Austin (TX); Hybrid; USD 150,000 - 230,000; Full time

Job summary

Base is seeking a hands-on Software Engineer to build the Identity Provider and Authorization platform that controls access to Base's systems. You will own the core primitives for workforce SSO, cloud federation, and entitlements, ensuring least privilege and auditable access across internal apps and cloud services.

You will collaborate with IT, security, and application teams to keep identity and tokens as a shared foundation while applications own their authorization logic.

Qualifications

• Strong backend engineering experience in Go, Java, or a similar systems language.
• Experience designing or operating identity systems — SSO/IdP, authn/authz, entitlements, or workload identity.
• Working knowledge of OIDC, SAML, and SCIM.
• Comfort with cryptographic identity primitives — PKI, mTLS, or hardware-backed keys.
• High ownership and clear communication in ambiguous, fast-moving environments.

Responsibilities

• Build and operate the identity provider platform for Base's workforce and services.
• Design authentication policies (MFA, device assurance) and authorization primitives.
• Federate cloud access across AWS and GCP with short-lived credentials.
• Define entitlements-as-code and manage in a GitOps monorepo.
• Develop workload identity infrastructure including private PKI and hardware-backed keys.

Skills

Go

Java

Identity systems

SSO/IdP

OIDC/SAML/SCIM

Cryptographic primitives

Tools

PKI

Hardware-backed keys

mTLS

Job description

Base is seeking a hands-on Software Engineer to build the Identity Provider and Authorization platform that controls access to Base's systems. You will own the core primitives for workforce SSO, cloud federation, and entitlements, ensuring least privilege and auditable access across internal apps and cloud services.

You will collaborate with IT, security, and application teams to keep identity and tokens as a shared foundation while applications own their authorization logic.