Senior Backend Engineer, Identity & Authorization

Baseten; New York (NY); On-site; USD 180,000 - 240,000; Full time

Benefits offered by this job

Competitive compensation

Employee health coverage

Winter break PTO

Parental leave

Fertility stipend

401(k)

Exposure to ML startups

Job summary

Baseten in the United States is seeking a founding member for the identity and authorization team within enterprise engineering to own the authorization model, credential systems, and admin experiences that govern access for customers like Notion and HubSpot.

You will design a fine-grained authorization system from the ground up to support workflows customers depend on, ensuring low-latency permission checks at high request volume and maintaining strong security guarantees.

Qualifications

• 4–5+ years building production backend systems with fine-grained authorization.
• End-to-end ownership from design to production rollout.
• Experience with multi-tenant systems where latency matters.
• Experience across product code, cloud, and Kubernetes.

Responsibilities

• Lead identity and authorization projects from problem definition through implementation and iteration.
• Design authorization and credential models for current workflows and future growth.
• Partner with product, design, and customer teams to translate security requirements into solutions.
• Establish engineering practices for quality, security, observability, and ownership.
• Provide technical leadership as the team grows.

Skills

Backend systems design

End-to-end ownership

Multi-tenant systems

Full-stack / Kubernetes

Tools

OpenFGA

SpiceDB

Cedar

Job description

Baseten in the United States is seeking a founding member for the identity and authorization team within enterprise engineering to own the authorization model, credential systems, and admin experiences that govern access for customers like Notion and HubSpot.

You will design a fine-grained authorization system from the ground up to support workflows customers depend on, ensuring low-latency permission checks at high request volume and maintaining strong security guarantees.