Staff Software Engineer, Identity & Authorization

Replit is an agentic AI software-creation platform for creating, launching, and growing apps, websites, tools, and businesses through natural language.

Foster City, United States
About Replit

Replit combines an AI agent with integrated application infrastructure—including authentication, databases, hosting, monitoring, integrations, and enterprise controls—to let users build and deploy software from one workspace.

View jobs by Replit

Skills

Candidate Availability

Required and preferred rules are kept separate and reflect the wording in the original posting.

About the Role

You will design, build, and operate identity and authorization systems for protected product interactions. You will evolve access policies and enterprise controls, operate token and workload identity services, threat-model security risks, lead safe migrations, own reliability, and develop shared platform primitives with partner teams.

Requirements

  • Experience shipping and operating security-sensitive backend or distributed systems
  • Expertise in authentication, authorization, or identity systems
  • Understanding of multi-tenant security, least privilege, delegation, auditability, and threat modeling
  • Experience migrating security-sensitive systems safely
  • Fluency in at least one production backend stack
  • Ability to communicate tradeoffs across security, reliability, latency, product experience, and maintainability

Responsibilities

  • Design and operate central authorization interfaces
  • Evolve enterprise roles, groups, entitlements, and workspace policy
  • Build and operate security token and workload identity systems
  • Threat-model delegation, confused-deputy risks, and cross-tenant movement
  • Make secure fail-closed behavior the default
  • Lead compatible migrations with shadow evaluation, feature gates, telemetry, and rollback plans
  • Own service SLOs, incidents, and operational health
  • Turn product requirements into shared platform primitives
  • Research and develop approaches to authorization for agentic systems

Benefits

  • Equity
  • 401(k) program with a 4% match for US employees
  • Health, dental, vision, and life insurance
  • Short-term and long-term disability insurance
  • Paid parental, medical, and caregiver leave
  • Flexible time off and holidays
  • Commuter benefits for eligible in-office US employees
  • Monthly wellness stipend
  • In-office setup reimbursement for eligible employees
  • Quarterly team gatherings
  • In-office amenities
Staff Software Engineer, Identity & Authorization at Replit | JobStash