Software Engineer, Identity Platform

The role

You will envision, build, and own identity across OpenRouter's inference gateway, marketplace, and agentic products. This includes defining authentication, access delegation, and enterprise provisioning.

What you will do

• Unify authentication including API keys, OAuth, OIDC, and enterprise SSO.
• Build delegated access for apps and agents.
• Implement secretless workload identity for CI pipelines and cloud workloads.
• Build composable authorization models.
• Enable enterprise provisioning via SCIM and identity provider integrations.
• Define the core identity model for users, organizations, and workspaces.
• Protect users and data through fraud detection and account-takeover defenses.
• Ensure auditability and correctness of access decisions.
• Work cross-functionally with Trust & Safety, Money, Product, Sales, and CS teams.

Required qualifications

• 5+ years building production identity, authentication or authorization systems at a SaaS, developer-platform or security company.
• Deep fluency in identity standards: OAuth 2.x (PKCE, token exchange, dynamic client registration), OIDC, SAML, SCIM and JWTs.
• Experience designing authorization models (RBAC, ABAB or ReBAC) for multi-tenant B2B products.
• Hands-on experience integrating enterprise identity providers (Okta, Entra ID, Google Workspace) and an auth platform (Clerk, Auth0, WorkOS or similar).
• Strong TypeScript and SQL.
• Comfortable with Postgres and building low-latency, cache-heavy services.
• A security mindset.
• Ability to work well across teams.
• High agency and AI-forward.

Nice to have

• Shipped enterprise SSO and SCIM that passed real customer security reviews.
• Built workload identity federation or secretless auth for CI and cloud workloads.
• Built OAuth, consent and delegation for AI agents or MCP clients acting on behalf of users.
• Experience with identity verification, KYC or fraud and risk systems (e.g. Stripe Identity, Persona, Sift).
• Experience with policy engines or fine-grained authorization (e.g. OpenFGA, Cedar, OPA, Zanzibar-style systems).
• Helped a company achieve SOC 2, ISO 27001 or similar compliance.
• Existing OpenRouter user, or have built projects in AI tooling.

About the company

OpenRouter is the leading AI routing and infrastructure layer that enterprises use to access, manage, and optimize large language models across providers.