Identity Platform Engineer (SSO, PKI, Cloud Fed)

Base Power; Austin (TX); In loco; USD 140.000 - 200.000; Tempo pieno

Descrizione del lavoro

Base is building a modern identity platform to securely authenticate and authorize access across its cloud apps, devices, and internal systems. We seek a hands-on software engineer to design and operate identity primitives, SSO/IdP, and workload identity with a governed PKI, advancing security while moving fast in a growing, in-person team.

You will partner with IT and security to define entitlements as code, implement MFA, RBAC, and short-lived credentials, and help shape Base's security

Competenze

• Experience designing or operating identity systems such as SSO/IdP, authn/authz, or workload identity.
• Strong backend engineering experience in Go, Java, or similar.
• Knowledge of OIDC, SAML, and SCIM and when to use each.
• Comfort with cryptographic identity primitives like PKI and mTLS.

Mansioni

• Build and operate the workforce identity provider (SSO, SAML/OIDC, SCIM provisioning).
• Design authentication policy and authorization primitives with least-privilege approach.
• Federate cloud access using AWS IAM Identity Center and GCP Workforce Identity Federation.
• Define and maintain entitlements-as-code in the GitOps monorepo.
• Build workload identity infrastructure including private PKI and hardware-backed keys.

Conoscenze

Go/Java backend

Identity systems

OIDC/SAML/SCIM

PKI/mTLS

Ownership & communication

Descrizione del lavoro

Base is building a modern identity platform to securely authenticate and authorize access across its cloud apps, devices, and internal systems. We seek a hands-on software engineer to design and operate identity primitives, SSO/IdP, and workload identity with a governed PKI, advancing security while moving fast in a growing, in-person team.

You will partner with IT and security to define entitlements as code, implement MFA, RBAC, and short-lived credentials, and help shape Base's security