Software Engineer, Agent Auth Experience

Render; United States; On-site; USD 140,000 - 210,000; Full time

Benefits offered by this job

4 weeks paid vacation

Parental leave 14 weeks

Health and dental coverage

Job summary

Render is seeking a software engineer with a strong identity and security focus to join our Expansion team and own authentication, authorization, and access-management primitives used by customers.

You will design and ship features like SSO, RBAC, audit logging, and SCIM provisioning, while ensuring safety, reliability, and a smooth user experience across the stack.

Qualifications

• 6+ years of experience shipping and operating production systems.
• Built customer-facing authentication or authorization features and understand how security choices shape the product experience.
• Designed and operated systems where correctness, availability, and safe rollout matter.
• Balanced security and product tradeoffs; understood when a simpler design suffices.
• Led ambiguous projects from design through production with cross-functional collaboration.

Responsibilities

• Design and ship authentication and authorization systems for users, agents, and services including credential scoping, SSO, SCIM provisioning and fine-grained permission models.
• Evolve Render's authorization model toward clear permissions and scopes for applications, environments, projects, and other platform resources.
• Own the security experience across the stack, from interfaces to manage features through to APIs and data models.
• Build controls and audit trails for customers to define, enforce and understand activity.
• Design shared auth APIs and work with Product, Design, Security, and other teams to drive adoption.
• Operate authentication and authorization systems with observability, safe rollouts, incident response, and on-call.

Skills

Authentication

Authorization

RBAC

Security design

Tools

OAuth

OpenID Connect

SAML

SCIM

JWTs

Job description

At Render, we’re building the modern cloud platform for developers creating AI-native, full-stack, multi-service applications. Our mission is to eliminate the tradeoff between the power of hyperscalers and the simplicity of developer-friendly platforms—so teams can ship fast, scale reliably, and focus on their product, not infrastructure.

Unlike complex hyperscalers or epithelial edge/serverless solutions, Render offers a developer-first experience with persistent compute, dynamic autoscaling, built-in orchestration, and observability, allowing teams to launch, scale, and manage real-world applications without writing infrastructure code or managing servers. Whether you're building LLM-powered applications, scalable SaaS products, or async processing pipelines, Render empowers teams to move fast and scale confidently from MVP to millions of users.

Our platform is trusted by over 6 million developers worldwide and continues to grow rapidly. In February 2026, we raised an additional $100M in Series C financing, bringing our total funding to $257M, to accelerate our vision of making cloud infrastructure both powerful and intuitive—designed for the speed of modern AI development.

We’re a diverse and talented team that values craft, velocity, and user experience. If you’re excited to help shape the future of the intelligent cloud and empower developers everywhere, we’d love to hear from you.

Applying to Render

We're seeking candidates who possess high integrity, humility, and an insatiable drive to learn. Through reasoned discussions and continuous feedback, we strive to improve both individually and collectively. We foster an environment of mutual trust and respect, empowering effective debate to achieve the best outcomes for our customers and team.

We especially encourage members of underrepresented groups in the tech community to apply and understand that not all successful candidates will meet each requirement listed.

Our interview process is unique to each role, and we value the candidate experience just as much as our customer experience. We hope your conversations with us reflect a thoughtful process that is illuminative, enjoyable, and respectful of your time.

About the Role

Render's mission is to eliminate the undifferentiated work that goes into building software products by offering an easy-to-use, powerful cloud platform for developer teams of all sizes.

We're looking for a software engineer with a strong identity and security focus to join our Expansion team. You'll help build the authentication, authorization, and access-management primitives that Render's customers depend on including SSO, RBAC, audit logging, scoped credentials and SCIM provisioning.

This is not a security operations or compliance role. You'll own changes across Render's platform and think carefully about how to make security features feel built in, not bolted on.

What You'll Do

• Design and ship authentication and authorization systems for users, agents, and services including credential scoping, SSO, SCIM provisioning and fine-grained permission models.

• Evolve Render's authorization model toward clear permissions and scopes for applications, environments, projects, and other platform resources.

• Own the security experience across the stack, from the interfaces used to manage features through to the APIs, data models and systems behind them.

• Build the controls and audit trails customers use to define, enforce and understand how people, services and agents act within their systems.

• Design shared auth APIs and primitives, then work closely with Product, Design, Security, and other Render teams to drive adoption adoption.

• Operate authentication and authorization systems that customers and other teams depend on, including observability, safe rollouts, incident response, and on-call.

What We're Looking For

• 6+ years of experience shipping and operating production systems.

• You’ve built customer-facing authentication or authorization features and understand how security choices shape the product experience.

• You've designed and operated systems where correctness, availability, and safe rollout matter. You are comfortable working through API, data-model, caching, and migration tradeoffs.

• You can balance security and product tradeoffs. You understand why a control exists, the friction it creates and when a simpler design is enough.

• A track record of taking ambiguous projects from design through production while working with product, design, and engineers in other parts of the company.

We care more about the systems you've built and the decisions you made than whether your last role had a “security” title.

Nice-to-haves:

• Hands-on experience with OAuth, OpenID Connect, SAML, SCIM, JWTs or other authentication methods.

• Experience with multi-tenant authorization models such as RBAC, ABAC, or ReBAC, including policy engines or fine-grained authorization systems.

• Experience with workload identity, short-lived credentials, secrets management, privileged access, or security controls for services and agents.

• Experience building developer platforms, cloud infrastructure, identity product or SaaS products where APIs and backwards compatibility matter.

• Familiarity with compliance frameworks such as SOC 2 or ISO 27001 and an ability to turn those requirements into security improvements for all customers.

• Contributions to open-source auth/security tooling.

If this role excites you but you don’t meet every single requirement, we’d still love to hear from you—your unique experience might be just what we need.

Benefits

• 4 weeks of paid vacation.

• 14 weeks of fully paid parental leave for all parents to bond with a newly born, adopted, or fostered child. We will also work with you to create a supportive plan of return.

• Long-term disability, life insurance, and 401K plans.

• 100% employer-paid medical coverage and 99% employer-paid dental and vision coverage for you and a dependent. FSAs and HSAs are available as well.

• Monthly lifestyle stipend for wellness, mental health and therapy, hobbies, etc.

• Monthly cell phone and internet subsidy.

• Commuter benefits for Renders in the Bay Area, and home office stipends for remote Renders.

• Continuous learning benefits & related support.

This position is generally not eligible for new visa sponsorship. At Render's discretion, the business may sponsor existing visa transfers. Applicants who require sponsorship must receive business authorization.

Render is an equal-opportunity employer. We know that employing a team rich in diverse thoughts, experiences, and opinions allows our employees, product, and community to flourish. We make all employment decisions including hiring, evaluation, termination, promotional, and training opportunities, without regard to race, religion, color, sex, age, national origin, ancestry, sexual orientation, physical handicap, mental disability, medical condition, disability, gender or identity or expression, pregnancy or pregnancy-related condition, marital status, height and/or weight.

We will ensure that individuals with disabilities are provided reasonable accommodation to participate in the job application or interview process, to perform essential job functions, and to receive other benefits and privileges of employment. Please contact us to request accommodation.

Render — CCPA Applicant Privacy Notice

Render — GDPR Applicant Privacy Notice