Software Engineer, Backend - Security

The role

You will build the Identity Provider and Authorization platform to manage access to Base's systems. This includes designing identity primitives, workforce SSO, cloud federation, and workload identity infrastructure.

What you will do

• Build and operate Okta as the workforce identity provider.
• Design authentication policy and authorization primitives.
• Federate cloud access through AWS IAM Identity Center and GCP Workforce Identity Federation.
• Define and maintain entitlements-as-code in a GitOps monorepo.
• Build workload and headless identity infrastructure.
• Define Identity Assurance Level requirements per NIST SP 800-63-3.
• Partner with IT, security, and application teams.

Required qualifications

• Strong backend engineering experience in Go, Java, or a similar systems language.
• Experience designing or operating identity systems — SSO/IdP, authn/authz, entitlements, or workload identity.
• Working knowledge of OIDC, SAML, and SCIM.
• Comfort with cryptographic identity primitives — PKI, mTLS, or hardware-backed keys.
• High ownership, clear communication, and comfort making durable technical decisions in ambiguous, fast-moving environments.

About the company

Base is an American next-generation power company rebuilding the electricity foundation by deploying a network of distributed batteries. They are engineers, operators, and creatives solving complex, interdisciplinary challenges.