Identity & Authorization Platform Engineer

Replit; Foster City (CA); On-site; USD 180,000 - 240,000; Full time

Benefits offered by this job

Health, Dental, Vision

Life Insurance

401(k) with employer match

Paid Parental/Medical Leave

Flexible Time Off

Job summary

Replit offers an opportunity for a Software Engineer to design, build, and operate identity and authorization systems that protect critical interactions across its platform, including Agent acting on behalf of a user. You will shape policy, enable scalable security, and collaborate across product and infrastructure teams.

The role emphasizes strong background in authentication/authorization, security engineering, and scalable backend design, with a focus on reliability, observability, and

Qualifications

• Shipping and operating security-sensitive backends or distributed systems in production.
• Deep knowledge in authentication, authorization, or identity systems.
• Strong understanding of multi-tenant security, delegation, and threat modeling.
• Experience migrating security-sensitive systems without breaking callers.

Responsibilities

• Design and operate central authorization interfaces with typed principals, actions, resources, decisions, explainable deny reasons, privilege attenuation, delegations, and obligations
• Evolve enterprise roles, groups, app access, entitlements, and workspace policy
• Build and operate Replit's Security Token Service and workload identity using OAuth 2.0 token exchange, JWT/OIDC, SPIFFE/SPIRE, and mTLS
• Threat-model delegation, cross-tenant movement, and ensure secure, fail-closed behavior as default
• Lead migrations with shadow evaluation, feature gates, telemetry, and rollback plans; own SLOs and incidents
• Partner with Agent, Connectors, Enterprise, Security, and Infrastructure teams to translate requirements into platform primitives
• Research and develop new Authx approaches in the Agentic world

Skills

Backend security

Authentication & authorization

Multi-tenant security

Policy engines

TypeScript

Tools

OAuth 2.0/OIDC

JWT

mTLS

RBAC

Zanzibar

Macaroons

Job description

Replit offers an opportunity for a Software Engineer to design, build, and operate identity and authorization systems that protect critical interactions across its platform, including Agent acting on behalf of a user. You will shape policy, enable scalable security, and collaborate across product and infrastructure teams.

The role emphasizes strong background in authentication/authorization, security engineering, and scalable backend design, with a focus on reliability, observability, and