Senior Identity Platform Engineer Enterprise Authentication

OpenRouter, Inc; United States; À distance; USD 140 000 - 210 000; Plein temps

Résumé du poste

OpenRouter, Inc. is hiring its first Software Engineer, Identity Platform to design and own the enterprise identity layer across the inference gateway, marketplace, and agentic products.

You will define authentication, access, and delegated permissions for users, organizations and apps, from first sign-in to enterprise rollout. You will tackle workload identity, auditability, and least-privilege design, partnering across Trust & Safety, Money, Product, and Sales to ship scalable, secure identity

Qualifications

• 5+ years building production identity, authentication or authorization systems at a SaaS or security company.
• Deep fluency in identity standards: OAuth 2.x, OIDC, SAML, SCIM and JWTs.
• Experience designing authorization models for multi-tenant B2B products including migrating to a unified model.

Responsabilités

• Unify and manage authentication across API keys, sessions, OAuth, and SAML/OIDC with MFA and SSO.
• Build delegated access for apps and agents with secure consent and dynamic client registration.
• Implement workload identity and avoid static secrets through federated identity.
• Develop a single, scalable authorization model with org/workspace roles and read-only keys.
• Define core identity model for users, organizations, workspaces, apps and guardrails.
• Ensure auditability with provenance tracking and explainable access decisions.

Connaissances

Identity systems

OAuth 2.x

OIDC

SAML

RBAC/ABAC/REBAC

PostgreSQL

TypeScript

Security mindset

Outils

Okta

Entra ID

Google Workspace

Clerk

Auth0

WorkOS

Description du poste

OpenRouter, Inc. is hiring its first Software Engineer, Identity Platform to design and own the enterprise identity layer across the inference gateway, marketplace, and agentic products.

You will define authentication, access, and delegated permissions for users, organizations and apps, from first sign-in to enterprise rollout. You will tackle workload identity, auditability, and least-privilege design, partnering across Trust & Safety, Money, Product, and Sales to ship scalable, secure identity