Software Engineer, Connect

Vercel Inc.; San Francisco (CA); Hybrid; USD 196,000 - 294,000; Full time

Benefits offered by this job

Mentorship and events

WFH budget

Gearing up for role

Job summary

Vercel Inc. in San Francisco is seeking a senior engineer to own APIs, token infrastructure, authorization, and SDKs for the Connect platform. You will collaborate with external companies to simplify building agent integrations with their products, balancing uptime with performance.

This role is hybrid in San Francisco, with in-office days Monday, Tuesday, and Friday, and a focus on secure, scalable agent access across diverse systems.

Qualifications

• 6+ years building and operating production backend or full-stack systems.
• Deep understanding of OAuth 2.0/2.1, OIDC, and JWTs.
• Strong TypeScript, and comfort developing backend and frontend components.
• Security instinct for integration code — SSRF, DNS rebinding, and related threats.
• Experience integrating with many third-party APIs and messy auth flows.

Responsibilities

• Ship provider integrations end to end — auth flows, token exchange, app registration, and the configuration UI — from generic API-key and OAuth presets through bespoke cases like Snowflake Partner Connect, Slack manager apps, and Microsoft Entra.
• Own and improve our infrastructure (uptime, performance, secure storage of credentials and keys) and developer experience for Connect
• Work with industry leaders within and outside of Vercel to propose and implement new authentication and authorization protocols for AI era
• Build and harden event forwarding — signature verification inbound, project-scoped identity outbound, delivered to the right deployment and environment.
• Make Connect the obvious way to give an agent a credential, extending the SDKs , consent-redirect flow, and framework adapters.
• Reduce the cost of the next hundred integrations, so most new providers become configuration rather than code.

Skills

TypeScript

Backend development

Frontend development

OAuth / JWTs

Security in integrations

System design

Job description

Vercel is the agentic infrastructure company, freeing people and agents to ship what's next. For more than a decade we've helped builders move from idea to production with speed, security, and exceptional developer experience.

Now we're scaling our products for both agents and people to ship and run software, built in the open and trusted by OpenAI, PayPal, Ramp, Supreme, and millions of developers worldwide.

About the Role:

Vercel Connect helps developers give agents and AI-built apps secure access to the data, tools, and events they need—without wrestling with OAuth, credentials, and integration complexity. We’re currently building two things: 1) a platform for managing agent identity, access and permissions and 2) a set of rich connectors for the 1000s of systems (like Linear, Slack, GitHub, Google, etc.) that agents will need to talk to.

We’re solving core problems like agent identity and delegated access, tool approval and standards around making agents aware of changes on 3rd party platforms.

As a senior engineer on this team you'll not only own our APIs, token infrastructure, authorization, SDKs, and more, but work with external companies to make it easier for developers to build agents that integrate with their products. You’ll need to balance both high uptime and fast performance with flexibility to allow for seamless connection to many systems that weren’t designed with agents in mind. If you’re looking for a role that will put you at the center of how agent identity and credentials work, this is it! This is a hybrid role based in San Francisco, in the office on Monday, Tuesday, and Friday.

What You Will Do:

• Ship provider integrations end to end — auth flows, token exchange, app registration, and the configuration UI — from generic API-key and OAuth presets through bespoke cases like Snowflake Partner Connect, Slack manager apps, and Microsoft Entra.
• Own and improve our infrastructure (uptime, performance, secure storage of credentials and keys) and developer experience for Connect
• Work with industry leaders within and outside of Vercel to propose and implement new authentication and authorization protocols for AI era
• Build and harden event forwarding — signature verification inbound, project-scoped identity outbound, delivered to the right deployment and environment.
• Make Connect the obvious way to give an agent a credential, extending the SDKs , consent-redirect flow, and framework adapters.
• Reduce the cost of the next hundred integrations, so most new providers become configuration rather than code.

About You:

• 6+ years building and operating production backend or full-stack systems, with a track record of owning a service or platform surface rather than a feature.
• You deeply understand your users problems and work in a focused manner to address them, leveling up the product you’re working on over time.
• Deep, practical understanding of OAuth 2.0/2.1, OIDC, and JWTs — not just wiring up a client library, but reasoning about authorization codes, PKCE, refresh semantics, audience and scope restriction, token exchange, and what each of those actually protects against.
• A security instinct for integration code specifically — SSRF and DNS rebinding, confused-deputy and mix-up attacks, redirect-URI validation, webhook signature verification, tenant isolation. You've either found these bugs or fixed them.
• Strong TypeScript, and comfort developing backend and frontend components.
• Experience integrating with many third-party APIs, an appetite for the reality of it — undocumented behavior, non-compliant OAuth, inconsistent errors — and the judgement to absorb that mess behind a clean abstractions
• Competitive compensation package, including equity.
• Learn and Grow - we provide mentorship and send you to events that help you build your network and skills.
• Flexible Time Off.
• We will provide you the gear you need to do your role, and a WFH budget for you to outfit your space as needed.

The San Francisco, CA base pay range for this role is $196,000-$294,000. Actual salary will be based on job-related skills, experience, and location. Compensation outside of San Francisco may be adjusted based on employee location. The total compensation package may include benefits, equity-based compensation, and eligibility for a company bonus or variable pay program depending on the role. Your recruiter can share more details during the hiring process.

• Equal Opportunity:Vercel is committed to fostering and empowering an inclusive community within our organization. We do not discriminate on the basis of race, religion, color, gender expression or identity, sexual orientation, national origin, citizenship, age, marital status, veteran status, disability status, or any other characteristic protected by law. Vercel encourages everyone to apply for our available positions, even if they don't necessarily check every box on the job description.