Senior Identity Platform Engineer: Enterprise SSO & OAuth

OpenRouter, Inc; New York (NY); On-site; USD 180,000 - 240,000; Full time

Job summary

OpenRouter is hiring its first Software Engineer, Identity Platform to design and own identity across the inference gateway, marketplace, and agentic products. You will define how people, organizations, workspaces, apps and agents authenticate, access, and delegate rights—from individual developers to Fortune 500 deployments.

If you love security, systems design, and product, this is your chance to build the trust layer that enables OpenRouter’s enterprise adoption and growth.

Qualifications

• 5+ years building production identity, authentication or authorization systems at a SaaS/org security company.
• Deep fluency in OAuth 2.x, OIDC, SAML, SCIM and JWTs and practical pitfalls.
• Designing authorization models for multi-tenant B2B products and migrating checks to a unified model.
• Hands-on integration with enterprise identity providers (Okta, Entra ID, Google Workspace) and an auth platform.
• Strong TypeScript and SQL; comfortable with Postgres and low-latency services.
• Security mindset: threat models, least privilege, explain decisions to security reviewers.
• Work across Trust & Safety, Money, Product, Sales, CS; translate enterprise asks into clean systems.
• High agency and AI-forward; automate security/onboarding tasks.

Responsibilities

• Unify authentication: sign-in, MFA, passkeys and SSO across all credentials.
• Build delegated access for apps and agents with dynamic client registration and consent.
• Go secretless with workload identity and short-lived credentials under federation policies.
• Create a single permission model with fine-grained roles and deny-by-default enforcement.
• Enable SCIM provisioning, domain verification and scalable onboarding.
• Define core identity model: users, orgs, workspaces, apps and guardrails.
• Ensure auditability: provenance, explainable access decisions and auditable changes.
• Collaborate with Trust & Safety, Money, Product, Sales and CS on security reviews and rollouts.

Skills

Identity systems

OAuth/OIDC

RBAC/ABAC

TypeScript

SQL

Security mindset

Cross‑functional

AI automation

Tools

Okta

Entra ID

Google Workspace

Clerk

Auth0

WorkOS

Job description

OpenRouter is hiring its first Software Engineer, Identity Platform to design and own identity across the inference gateway, marketplace, and agentic products. You will define how people, organizations, workspaces, apps and agents authenticate, access, and delegate rights—from individual developers to Fortune 500 deployments.

If you love security, systems design, and product, this is your chance to build the trust layer that enables OpenRouter’s enterprise adoption and growth.