Replit
Staff Software Engineer, Identity & Authorization
Foster City, CA · Staff+ · Full-time
Sponsorship not specifiedDetected 40 days ago
TypeScriptGoRustExpressDistributed SystemsFull-Stack DevelopmentPostgreSQLKubernetesRESTgRPCOAuthCybersecurityResearchCollaboration
Stay score
odds of building a lasting career here
40Risky
Cap-exempt (no lottery)0
Sponsors this role90
Entry-level history0
PERM / green-card track0
Lottery odds40
Fits your clock70
Thin sponsorship signal and lottery-bound. A low-probability bet with your clock running. Prioritize cap-exempt roles and proven entry-level sponsors first.
Lottery odds assume a STEM candidate.
Personalize to your clock →Employer immigration record
from this employer's Department of Labor filings
Files H-1B transfers
18 transfer filings in the last year, covering 18 workers. Median labor-condition decision: 7 days. An employer that already files transfers is one that can take over an existing H-1B.
Sourced from Department of Labor LCA, PERM and prevailing-wage disclosure data. Employer matching is by name, so figures may be split across an employer's legal entities. Absence of a filing means none appears in our copy of the data, not that none exists.
Community outcomes
No reports yet — be the first to help the next applicant.
About the role
- The work is guided by a few simple questions:
- Can every protected request prove which workload made it, which principal it represents, and who is acting on that principal's behalf?
- Can product teams express policy once and trust the same decision across web, mobile, Agent, and internal services?
Responsibilities
- Design and operate central authorization interfaces with typed principals, actions, resources, decisions, explainable deny reasons, privilege attenuation, delegations, and obligations
- Build and operate Replit's Security Token Service and workload identity using OAuth 2.0 token exchange, JWT/OIDC, SPIFFE/SPIRE, and mTLS
- Partner with Agent, Connectors, Enterprise, Security, and Infrastructure teams to turn product requirements into shared platform primitives
- Research and develop new innovative approaches to Authx in the Agentic world
Requirements
- Experience shipping and operating security-sensitive backend or distributed systems in production, including reliability, performance, incidents, and observability
- You do not need prior experience with every item
- Experience migrating security-sensitive systems without breaking callers.
Skills
- Strong understanding of multi-tenant security, least privilege, delegation, privilege attenuation, auditability, and threat modeling
- Self-driving Company https://replit.com/blog/self-driving-company
- Replit Agent at Scale https://replit.com/blog/evaluating-and-improving-agent-at-scale
- AI Adoption https://replit.com/blog/ai-adoption
- Build Open-Source Apps https://replit.com/build/open-source-app-builder
- Operating Principles https://blog.replit.com/operating-principles
- Reasons not to work at Replit https://blog.replit.com/reasons-not-to-join-replit
Compensation
- 💰 Competitive Salary & Equity
Benefits
- Lead compatible migrations with shadow evaluation, feature gates, telemetry, and rollback plans, and own the SLOs, incidents, and operational health of the systems you ship
Company info
- Product Platform builds and owns the shared foundations the rest of Replit is built on, spanning the full stack so every other team can ship features safely and quickly.
- Identity & Authorization defines how people, agents, sandboxes, and services prove who they are and what they can do.
- These systems protect critical product and service interactions across Replit's web product, Agent, enterprise controls, and internal services.
- Our work is high-leverage and horizontal:
- when identity and policy are clear, reliable, and easy to adopt, every other team can move faster without rebuilding security controls.
- We are a small, collaborative team that values curiosity and clear thinking over pedigree, and we work in the open by bringing each other the problem rather than just the request.
- We care more about how you reason and build than the route you took to get here.
- Replit is the agentic software creation platform that enables anyone to build applications using natural language.
This listing is sourced directly from Replit's careers page and normalized into a canonical job model.