Baselayer

Senior Engineer, Agentic Identity

San Francisco, California · Senior

Sponsorship not specified$230k-$340kDetected 7 days ago

PythonGoFastAPIPostgreSQLOAuthAgentic AIResearch

About the role

AI agents are beginning to act on behalf of people and businesses against publishers, banks, payment networks, and APIs.
That model breaks the moment the actor is an agent.
We're solving real-time entity resolution at a scale no one else has cracked - fusing dozens of data sources into a single business identity graph and resolving any entity in milliseconds.

Build and maintain the runtime issuer/mint: OAuth Token Exchange (RFC 8693), JWS credentials (RFC 7515/7519, SD-JWT-VC), and Merkle audit log with real-time revocation.
Own and evolve the wire format and claim registry: JWT profile, verification_level/verification_method enums, and eIDAS/NIST IAL/FATF CDD crosswalk.
Implement sub-millisecond JWS verification and Web Bot Auth signature checks (RFC 9421) at the HTTP edge for counterparty CDNs, merchants, and publisher paywalls.
Build and maintain Passport - the user's cloud-resident principal account with canonical handle, KYC/KYB record, authorized-operators list, audit feed, and authenticator binding.
Develop operator integration: embedded KYB onboarding inside first OAuth 2.0 consent, per-operator opt-in, and webhook delivery via Svix.
Career rocket fuel: You'll help build the foundation of a high-growth startup, working side by side with experienced founders and team members who've done it before

Production experience with async Python on Postgres, including migration safety and observability.
Familiarity with AP2, x402, MPP, UCP, or Mastercard VI specs and how identity rides alongside mandate.

Salary Range: $230,000 - $340,000 + Equity
Competitive compensation: We pay well and back it with equity. We want you to think and act like an owner

401(k) with company match: We match your contributions so your future self benefits too
Time off when you need it: Flexible PTO so you can recharge without red tape
Competitive compensation: We pay well and back it with equity.
Benefits on us: We cover 100% of your health, dental, and vision premiums.
HSA contributions included: We contribute to your HSA on applicable plans, so your coverage works as hard as you do
Stay healthy, stay sharp: A $250 monthly gym stipend to help you bring your best self to work, and everywhere else
Fluent in Python and Go, or strong in one with a track record of learning the other quickly.

It's a graph AI problem, a retrieval problem, and a fraud-modeling problem stacked on top of each other.
The technical depth is real.
You'd be joining a small team where the data moat is defensible, the research problems are open, and the infrastructure you build becomes load-bearing for businesses.
Ownership is real.
Velocity is real.
There's no layer of process between an idea and shipping it.
We're at an inflection point - the graph is built, the match rates speak for themselves, and the hardest problems are still ahead: graph embeddings, fraud propagation models across the business network, real-time traversal at sub-100ms latency, and expanding the identity layer beyond finance into every platform that needs to trust a business.
If you want to work on something foundational - the kind of infrastructure that gets built once and everything else runs on top of - this is it.

Develop operator integration: embedded KYB onboarding inside first OAuth 2.0 consent, per-operator opt-in, and webhook delivery via Svix.

This listing is sourced directly from Baselayer's careers page and normalized into a canonical job model.