Source Job

• Extend the identity layer in Auth0: authentication flows, token issuance, and identity federation.
• Build and maintain the ReBAC authorization model in OpenFGA.
• Define how AI agents authenticate and receive scoped permissions alongside human users.

Basis develops software that automates digital media operations for agencies and brands, offering an all-in-one platform for planning, reporting, and financial reconciliation. Headquartered in Chicago, the company fosters an inclusive, growth-oriented culture with flexible work options across the U.S. and Canada.

• Design and build scalable identity, authentication, and authorization platforms at AlphaSense.
• Partner with security teams to ensure secure-by-design systems aligned with SOC2 and GDPR.
• Drive projects autonomously while collaborating with a Helsinki-based team in a remote setup.

AlphaSense provides AI-driven market intelligence and search trusted by 6,000+ enterprises, including most of the S&P 500. Founded in 2011, the 2,000+ employee company fosters a supportive, inspiring, and respectful global culture.

• Design, build, and operate backend systems supporting secure login, account management, authentication, and authorization across multiple products.
• Own engineering initiatives end to end, from defining problems and developing technical designs to implementation, testing, deployment, and ongoing optimization.
• Collaborate with Product, Information Security, Application Security, and engineering teams to balance strong security controls with a seamless customer experience.

The partner company builds secure identity systems that let customers access and manage their accounts across multiple products. It operates with a digital-first culture that values collaboration, continuous learning, and purposeful innovation.

• Contribute to a core system that millions of end users rely on
• Implement backend services and design architecture where reliability matters
• Collaborate with teams to improve system interactions and maintain quality, including code reviews and incident troubleshooting

Alpaca is a global leader in agent-first brokerage infrastructure for stocks, ETFs, options, crypto, and more. With 400+ employees worldwide and $400M in funding, they are committed to open source and a remote-first culture.

• Design and build paved paths for privileged access and secrets management on top of access management and secret storage platforms.
• Build self-service tooling, SDKs, and Terraform modules to enable just-in-time access and short-lived credentials.
• Partner with engineering teams to integrate security services into Kubernetes, CI/CD, and cloud environments across DoorDash, Wolt, and Deliveroo.

DoorDash is a technology and logistics company that operates a multi-sided marketplace connecting consumers, merchants, and dashers. They are building a large, inclusive team focused on empowering local economies.

• Develop and operate Alpaca's authentication, authorization, and identity provider services.
• Write Go for backend services and React/TypeScript for auth-related UI, owning features end to end.
• Collaborate with engineering teams on identity and access integration and maintain high code quality.

Alpaca is a US-headquartered global leader in agent-first brokerage infrastructure for stocks, ETFs, options, crypto, and more. The company has a diverse team of 400+ globally distributed members and is backed by $400 million in funding, fostering a culture of curiosity, empathy, and accountability.

• Partner with engineering to identify and mitigate security risks before launch, building secure frameworks and libraries that make control adoption easy.
• Own identity and secrets management, including credential issuance, rotation, and workload authentication across cloud and Kubernetes environments.
• Harden cloud security controls and build security models for AI agents with permission boundaries and tenant isolation.

Fieldguide builds software that automates assurance and audit work for cybersecurity, privacy, and financial audits, helping businesses enable trust. They are a remote-first company backed by top investors and trusted by over 50 of the top 100 accounting and consulting firms, with a values-driven culture.

• Revamp IAM strategy across products, cloud/on-prem infrastructure, and corporate applications.
• Architect identity governance, access management, and RBAC/ABAC workflows.
• Partner with IT and security to embed IAM principles and ensure compliance.

Recursion is a clinical-stage TechBio company decoding biology with an AI-native drug discovery platform. It fosters a bold, collaborative culture across offices in the US, UK, Canada, and beyond, focused on speed, integrity, and patient impact.

• Design, scale, and performance-tune REST APIs, gRPC services, and SQL queries powering player registration, authentication, and compliance.
• Own complex technical problems end-to-end, from proposals to delivery in a collaborative agile environment.
• Mentor engineers and drive platform reliability, monitoring, and scalability improvements.

PENN Entertainment is North America's leading provider of integrated entertainment, sports content, and casino gaming experiences, powering platforms like Hollywood Casino, theScore Bet Sportsbook, and theScore media app. The digital team fosters a collaborative, growth-oriented culture with locations throughout North America and a focus on cutting-edge in-house technology.

• Design, develop, and maintain cloud-based IAM solutions using Microsoft Entra ID and Entra External ID for B2B partners.
• Build secure APIs, microservices, and web apps with Java, Spring Boot, and modern frontend frameworks.
• Collaborate with global teams to modernize enterprise identity platforms and strengthen access security.

The company modernizes enterprise identity and access management for partners, dealers, and suppliers. It is a large enterprise with globally distributed teams, emphasizing collaboration, automation, and security.

• Design and evolve Scopely’s IAM architecture across AWS, GCP, SaaS, and remote access platforms.
• Own Terraform-based IAM automation including reusable modules, policy-as-code, and access workflows.
• Strengthen identity security through least-privilege design, Zero Trust controls, and AI-assisted workflows.

Scopely is a leading video game and interactive entertainment company behind hit games like MONOPOLY GO! and Pokémon GO. Founded in 2011, Scopely is powered by thousands of world-class gamemakers globally and has generated over $10 billion in lifetime revenue.

• Run and improve IAM operations, including access lifecycle, requests, certifications, and issue resolution.
• Automate repetitive processes and build production backend services, APIs, and identity integrations.
• Partner with Security, IT, and Engineering on secure, auditable changes and SailPoint/Auth0 integrations.

Affirm provides clear, predictable pay-over-time options with no hidden fees or surprises, helping consumers make confident purchases. A remote-first company, Affirm emphasizes care, transparency, and flexibility, with comprehensive benefits and an inclusive culture.

• Design and build authentication flows, OAuth integrations, and authorization platforms across Motive's products.
• Develop BYOK capabilities and security controls for customers with advanced data-protection requirements.
• Drive security projects from technical design to implementation, including threat modeling, vulnerability remediation, and security automation.

Motive empowers the people who run physical operations with tools to make their work safer, more productive, and more profitable. The company serves nearly 100,000 customers, from Fortune 500 enterprises to small businesses, across a wide range of industries.

• Design, build, and operate security engineering services in Go and Python on AWS and Kubernetes.
• Own the event-driven NATS platform connecting security services, ensuring delivery guarantees and observability.
• Build agentic security workflows and CI security gates (SAST, SCA, secret detection) that are trusted by default.

Sezzle is a fintech company that offers interest-free installment plans and aims to financially empower the next generation. It is building an innovative, dynamic team of engineers and data enthusiasts with a culture that values unique, purpose-driven individuals.

• Own the identity lifecycle with automated provisioning and deprovisioning based on RBAC/ABAC.
• Manage access including Conditional Access, phishing-resistant MFA, and privileged access on a Zero Trust model.
• Own directory and federation across Entra ID, SSO, SAML, OIDC, and OAuth2.

Lantern is a specialty care platform that connects people with high-quality, affordable specialty care close to home. The company operates in a regulated healthcare environment and serves over 6 million members, with a culture that is open by default and secure by design.

• Operate and sustain Chainguard's technology platforms across cloud, IAM, and AI.
• Implement and maintain access controls, identity policies, and authentication systems.
• Support hardening and monitoring of cloud infrastructure and AI/ML pipelines.

Chainguard delivers hardened, secure builds of open source software, helping enterprises build faster and stay compliant. A late-stage venture-backed startup, it serves top companies like OpenAI, and its culture is customer obsessed and down-to-earth.

• Threat model token exchange, delegation, and MCP gateway flows to catch credential leaks.
• Build automated security controls for cloud, pipelines, and artifacts; keep credentials short-lived.
• Own incident response and customer security reviews, working with engineers who know the field.

Keycard builds identity and access infrastructure for AI agents, issuing verified, short-lived credentials. It is a remote-first startup backed by a16z, Boldstart, and Acrew, founded by Snyk, Auth0, HashiCorp, and Heroku alumni.

• Own the architecture and technical roadmap for customer access to the Trading API, including identity, authorization, and account models.
• Lead delivery of customer-facing trading applications with real-time market data and secure access systems.
• Mentor engineers and set the standard for security, safe delivery, and production excellence.

Alpaca is a global leader in agent-first brokerage infrastructure, providing APIs for stocks, ETFs, options, crypto, and more. The company has 400+ employees globally and values curiosity, empathy, and accountability.

• Design and develop full-stack payment modernization solutions using Java, Spring Boot, Kafka, and React.
• Apply domain-driven design and own identity, cloud, and performance engineering for card network integration.
• Drive testing, CI/CD, and collaborate across teams in a large matrixed program environment.

Kunai builds full-stack technology solutions for banks, credit and payment networks, infrastructure providers, and their customers. With over 20 years of success, the company fosters a culture of collaboration, creativity, and continuous learning.

• Own the reliability and operational performance of large-scale distributed systems and data infrastructure.
• Deliver streaming and data infrastructure required by critical product initiatives, maintaining 99.9% availability.
• Reduce operational maintenance and improve infrastructure self-service and cost accountability.

Chainlink is the industry-standard oracle platform bringing capital markets onchain and powering decentralized finance. It is a global, remote-first team that secures the vast majority of DeFi and is trusted by major financial institutions.