Baseten
Software Engineer - Identity & Authorization
San Francisco · Senior
Sponsorship not specifiedDetected 44 days ago
PythonGoFull-Stack DevelopmentKubernetesOAuthMachine LearningSparkHubSpotResearchLeadershipMentoring
Stay score
odds of building a lasting career here
40Risky
Cap-exempt (no lottery)0
Sponsors this role90
Entry-level history0
PERM / green-card track0
Lottery odds40
Fits your clock70
Thin sponsorship signal and lottery-bound. A low-probability bet with your clock running. Prioritize cap-exempt roles and proven entry-level sponsors first.
Lottery odds assume a STEM candidate.
Personalize to your clock →Community outcomes
No reports yet — be the first to help the next applicant.
About the role
- Programmatic authentication allowing high-compliance customers to connect service principles securely via short-lived, workload-based credentials
- Agent credentials that grant an agent exactly the access it needs for the given task and nothing more
- Enterprise identity lifecycle including single sign-on, SCIM provisioning, and per-organization session expiry policies
Responsibilities
- Lead identity and authorization projects from problem definition and technical design through implementation, launch, and iteration.
- Design authorization and credential models that support critical user workflows today and can be safely extended as the platform evolves.
- Partner with product, design, and customer-facing teams to turn enterprise security requirements into durable technical solutions.
- We're growing quickly and recently raised our $1.5B Series F https://www.baseten.co/blog/announcing-our-series-f/, led by Altimeter Capital, Conviction Partners, and Spark Capital.
- Join us and help build the platform engineers turn to ship AI products.
- You'll own the identity and access layer of the Baseten platform: the authorization model, credential systems, and admin experiences that enterprise IT teams use to govern access for organizations like Harvey, HubSpot, and Notion.
- Fine-grained authorization for users, service accounts, and agentic workloads: per-resource permissions at the organization, team, and workload scope to support both common workflows and complex enterprise access policies
Requirements
- Comfort working across the full stack, from product and application code to cloud and Kubernetes infrastructure.
Nice to have
- Experience with Python and Go.
- Experience running an OpenFGA, SpiceDB, or similar deployment in production, beyond a proof of concept.
- Working knowledge of OAuth, OIDC, and SCIM at the protocol level.
Compensation
- Competitive compensation, including meaningful equity
Benefits
- Competitive compensation, including meaningful equity
- (U.S. only) 100% coverage of medical, dental, and vision insurance for employee and dependents
- Flexible PTO policy including company wide Winter Break (our offices are closed from Christmas Eve to New Year's Day!)
- Paid parental leave
- Fertility and family-building stipend through Carrot
- Exposure to a variety of ML startups, offering unparalleled learning and networking opportunities.
- If you are a motivated individual with a passion for machine learning and a desire to be part of a collaborative and forward-thinking team, we would love to hear from you.
- By uniting applied AI research, flexible infrastructure, and seamless developer tooling, we enable companies operating at the frontier of AI to bring cutting-edge models into production.
Company info
- At Baseten, we are committed to fostering a diverse and inclusive workplace.
- You'll design and build Baseten's fine-grained authorization system from the ground up to support the workflows customers depend on today while giving them cleaner, more precise ways to manage access as the platform grows.
Apply directly at Baseten →Create a free account for alerts like thisView Baseten immigration profile
This listing is sourced directly from Baseten's careers page and normalized into a canonical job model.