{"id":2139124,"url":"https://alion.io/job/base-power-software-engineer-backend-security","title":"Software Engineer, Backend (Security)","company":{"id":5219,"name":"Base Power","domain":"basepower.com","url":"https://alion.io/company/base-power-company","size_band":null,"is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Ashby","truth_index":{"grade":"A","score":89,"open_postings":184,"ghost_share":0.103,"stale_share":0,"repost_share":0.005,"time_to_fill_p50_days":86,"computed_at":"2026-10-16T05:45:00Z"}},"role":"Backend","role_family":"Backend","seniority":null,"employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Austin, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":121000,"max_usd":256000,"period":"year","method":"role_country_seniority_unknown","sample_n":8485},"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AWS","optional":false},{"name":"GCP","optional":false},{"name":"GitOps","optional":false},{"name":"Go","optional":false},{"name":"IAM","optional":false},{"name":"Java","optional":false},{"name":"Least Privilege","optional":false},{"name":"Okta","optional":false},{"name":"PKI","optional":false}],"status":"live","first_seen_at":"2026-10-08T23:49:11Z","employer_posted_date":"2026-10-08","last_verified_at":"2026-10-17T02:21:38Z","board_verified":true,"closed_at":null,"days_open":8,"trust":{"level":"ok","repost_count":0,"flags":["company_stale"],"days_open":7},"description":"About Base\nBase is America’s next-generation power company. We’re rebuilding the foundation of modern civilization-electricity-by deploying a vast network of distributed batteries that is transforming today’s fragile, centralized grid into a resilient and abundant system. We are engineers, operators, and creatives solving some of the most complex, interdisciplinary challenges of our time.\nAbout the Role\nWe are seeking Software Engineers to build the Identity Provider and Authorization platform that decides who - and what - can access Base's systems.\nBase runs on a growing mix of internal apps, cloud infrastructure, and machines that all need to authenticate and authorize safely: employees signing into AWS and GCP, services talking to each other, and devices proving their own identity in the field. This role will own the platform layer that turns fragmented, ad hoc access into a single, auditable identity system.\nYou will design the core primitives for identity and access: workforce SSO, cloud federation, entitlements-as-code, and workload identity backed by a governed PKI. The ideal candidate is a hands-on engineer who takes security-critical systems seriously, moves fast without cutting corners on least privilege, and can turn a still-forming scope into durable infrastructure other engineers build on.\nWhat You'll Do\nBuild and operate Okta as Base's workforce identity provider - SSO, SAML/OIDC app integrations, SCIM provisioning, and joiner/mover/leaver lifecycle automation.\n\nDesign authentication policy (MFA, device assurance) and authorization primitives (RBAC, least-privilege role catalog, break-glass access) that other teams can safely build on.\n\nFederate cloud access through AWS IAM Identity Center and GCP Workforce Identity Federation, replacing long-lived IAM users and service-account keys with short-lived credentials.\n\nDefine and maintain entitlements-as-code: every role, group mapping, and access grant lives in the GitOps monorepo as a reviewable pull request.\n\nBuild workload and headless identity infrastructure - private CA/PKI, AWS Roles Anywhere, GCP WIF-X509, and hardware-backed key custody (Secure Enclave, TPM, YubiKey).\n\nDefine Identity Assurance Level requirements, per NIST SP 800-63-3, for internal, partner, and service-to-service access.\n\nPartner with IT, security, and application teams to keep identity, groups, and tokens as the shared foundation, while apps continue to own their own authorization business logic.\n\nWhat You'll Bring\nStrong backend engineering experience in Go, Java, or a similar systems language.\n\nExperience designing or operating identity systems - SSO/IdP, authn/authz, entitlements, or workload identity.\n\nWorking knowledge of OIDC, SAML, and SCIM, and judgment about when to use each.\n\nComfort with cryptographic identity primitives - PKI, mTLS, or hardware-backed keys.\n\nHigh ownership, clear communication, and comfort making durable technical decisions in ambiguous, fast-moving environments, including scope that's still being defined.\n\nAbout the Team\nThe Identity Provider and Authorization team decides who - and what - can access Base's systems. We build and operate the workforce identity provider, federate access to cloud and internal infrastructure, define entitlements as code, and issue workload identity from a single governed PKI.\nOur scope spans internal and partner access today, with customer-facing (CIAM) and fine-grained ABAC still being scoped, plus the service-to-service and headless identity that keeps Base's growing fleet of software and devices secure. Application teams own their own authorization business logic - we supply the identity, groups, and tokens they build on.\nThis is a rare opportunity to build the identity layer for one of the fastest-scaling energy companies in the country, from close to zero.\nPlease note: Base is a startup, which means priorities shift and evolve quickly. Your role may expand or change based on the needs of the business at any given time, so the responsibilities listed may not be exhaustive.\nOur Values\nFirst Principles Thinking: Question assumptions. Principles > rules.\n\nOperate at Base Pace: Focus on what matters, act quickly, and learn by doing.\n\nGive & Get Feedback: Be direct, be humble, and maintain a growth mindset.\n\nEveryone’s an Owner: Follow through on commitments and own results.\n\nStrong Opinions, Loosely Held: Drive clarity and make calls with imperfect information.\n\nCommitted to the Mission: Rebuilding the grid is a big challenge. We work hard because we care deeply about the impact we’re creating. We work in-person. It’s not a 9-to-5. We are all-in.\n\nFun & Optimism Coexist with Grit: Collaboration and celebration coincide with the intensity of building real things.\n\nDo the best work of your life at Base.","description_format":"text","description_chars":4784,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Energy Storage","Smart Grid"],"lifecycle":[{"event":"open","at":"2026-10-09T02:40:20Z"}],"visa":[{"country":"US","licensed_sponsor":true,"evidence":"H-1B filings in 12 months: 12","filings_12m":12,"filings_prev_12m":4,"green_card_filings_12m":0,"median_offered_wage_usd":137500,"route":null,"cap_exempt":false,"checked_at":"2026-10-15T11:24:14+00:00","sources":["US Department of Labor: LCA disclosure data (H-1B, H-1B1, E-3)"],"filings_for_role_12m":1}],"liveness":{"score":90,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.903,"p_room":1,"age_days":7,"expected_fill_days":86,"reasons":["conf:1","velocity","win:early","comp:brand"],"computed_at":"2026-10-16T05:45:00Z"},"pay":null,"html_url":"https://alion.io/job/base-power-software-engineer-backend-security","json_url":"https://alion.io/job/base-power-software-engineer-backend-security.json","meta":{"generated_at":"2026-10-17T04:19:30Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":5616,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-18T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":5219},"rest":"https://alion.io/mcp/rest/get_company?id=5219"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fbase-power-software-engineer-backend-security"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fbase-power-software-engineer-backend-security"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fbase-power-software-engineer-backend-security"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/base-power-software-engineer-backend-security\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fbase-power-software-engineer-backend-security"}]}