215K–285K USD / year
Software Engineer, Identity Platform
BackendRemote — United States
Published on 2026-10-20
These details were extracted automatically from the original listing. They may not be complete or fully up to date — it's worth checking the original job post.
About this role
Build and own OpenRouter’s identity platform across its inference gateway, marketplace, and agent products. The role covers authentication, authorization, enterprise identity integrations, and secure delegated access, while keeping identity checks fast and reliable on critical request paths.
About the company
OpenRouter is a unified API that routes requests across large language model providers so developers can access, switch, and scale models without lock-in or complex multi-provider integrations.
Stack
TypeScriptSQLPostgreSQLOAuth 2.xOIDCSAMLSCIMJWT
What you'll do
- Unify authentication across API keys, sessions, OAuth/OIDC, and MCP logins.
- Build delegated access and consent flows for apps and agents.
- Implement workload identity federation and secretless authentication.
- Design a composable, least-privilege authorization model.
- Deliver enterprise SSO, SCIM provisioning, and identity-provider integrations.
- Define the core identity data model and credential lifecycle.
- Improve fraud defenses, auditability, and access-decision correctness.
- Partner with Trust & Safety, Money, Product, Sales, and Customer Success.
What we're looking for
- 5+ years building production identity, authentication, or authorization systems.
- Fluency in OAuth 2.x, OIDC, SAML, SCIM, and JWTs.
- Experience designing multi-tenant B2B authorization models and migrating legacy checks.
- Hands-on enterprise identity-provider and authentication-platform integrations.
- Strong TypeScript and SQL skills; experience with Postgres and low-latency services.
- Security-focused approach, including threat modeling and least-privilege design.
- Cross-functional communication and high ownership.
- Uses coding agents and automation in day-to-day work.
Nice to have
- Shipped enterprise SSO and SCIM through customer security reviews.
- Built workload identity federation or secretless authentication.
- Built OAuth delegation for AI agents or MCP clients.
- Experience with identity verification, KYC, fraud, or risk systems.
- Experience with policy engines or fine-grained authorization systems.
- Supported SOC 2, ISO 27001, or similar compliance.
- OpenRouter user or experience building AI tooling.
Benefits
- Equity