{"id":191386,"url":"https://alion.io/job/baseten-software-engineer-identity-and-authorization","title":"Software Engineer - Identity & Authorization","company":{"id":4399,"name":"Baseten","domain":"baseten.co","url":"https://alion.io/company/baseten","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Ashby","truth_index":{"grade":"B","score":71,"open_postings":19,"ghost_share":0,"stale_share":0.947,"repost_share":0.053,"time_to_fill_p50_days":88,"computed_at":"2026-10-22T06:10:10Z"}},"role":"Backend","role_family":"Backend","seniority":"middle","employment_type":"full_time","work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["San Francisco, United States","Toronto, Canada","New York, United States","Montreal, Canada","Seattle, United States"],"countries":["US","CA"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":240000,"max":285000,"currency":"USD","period":"year","gross":null,"usd_annual":285000},"salary_estimate":null,"experience_years_min":4,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Baseten","optional":false},{"name":"Cursor","optional":false},{"name":"Kubernetes","optional":false},{"name":"Notion","optional":false},{"name":"Spark","optional":false},{"name":"Go","optional":true},{"name":"Machine Learning","optional":true},{"name":"Python","optional":true}],"status":"closed","first_seen_at":"2026-09-02T15:37:51Z","employer_posted_date":"2026-09-02","last_verified_at":"2026-10-22T18:37:47Z","board_verified":false,"closed_at":"2026-10-22T18:37:47Z","days_open":50,"trust":{"level":"not_scored","repost_count":null,"flags":[],"days_open":50},"description":"ABOUT BASETEN\nBaseten powers mission-critical inference for the world's most dynamic AI companies, like Cursor, Notion, OpenEvidence, Abridge, Clay, Gamma, and Writer. By uniting applied AI research, flexible infrastructure, and seamless developer tooling, we enable companies operating at the frontier of AI to bring cutting-edge models into production. We're growing quickly and recently raised our $1.5B Series F, led by Altimeter Capital, Conviction Partners, and Spark Capital. Join us and help build the platform engineers turn to ship AI products.\nTHE ROLE\nThe largest, most demanding enterprises run on Baseten, and they bring exacting requirements for how people, services, and agents access the platform. This is the founding role for our identity and authorization team within enterprise engineering. You'll own the identity and access layer of the Baseten platform: the authorization model, credential systems, and admin experiences that enterprise IT teams use to govern access for organizations like Harvey, HubSpot, and Notion.\nYou'll design and build Baseten's fine-grained authorization system from the ground up to support the workflows customers depend on today while giving them cleaner, more precise ways to manage access as the platform grows. Authorization at Baseten requires low-latency permission checks at high request volume, consistent contracts and behaviors across the product suite, and strong security guarantees for mission-critical, highly regulated workloads.\nEXAMPLE INITIATIVES\nRecent and upcoming work in this area:\nFine-grained authorization for users, service accounts, and agentic workloads: per-resource permissions at the organization, team, and workload scope to support both common workflows and complex enterprise access policies\n\nProgrammatic authentication allowing high-compliance customers to connect service principles securely via short-lived, workload-based credentials\n\nAgent credentials that grant an agent exactly the access it needs for the given task and nothing more\n\nEnterprise identity lifecycle including single sign-on, SCIM provisioning, and per-organization session expiry policies\n\nAdmin controls for centralized visibility, auditability, and governance over credentials, roles, and access\n\nRESPONSIBILITIES\nLead identity and authorization projects from problem definition and technical design through implementation, launch, and iteration.\n\nDesign authorization and credential models that support critical user workflows today and can be safely extended as the platform evolves.\n\nPartner with product, design, and customer-facing teams to turn enterprise security requirements into durable technical solutions.\n\nEstablish engineering practices for quality, security, observability, and operational ownership.\n\nProvide technical leadership and mentorship as the team grows.\n\nREQUIREMENTS\n4-5+ years of experience building production backend systems, including hands-on design and implementation of a product authorization system: per-resource or per-object permissions, relationship-based access control, a policy engine, or a fine-grained authorization system in the style of Zanzibar, OpenFGA, SpiceDB, or Cedar.\n\nDemonstrated end-to-end ownership: you've taken a system from first design through implementation, production rollout, and iteration with users.\n\nExperience developing and operating multi-tenant systems at scale, where authorization checks sit in the request path and latency and consistency matter.\n\nComfort working across the full stack, from product and application code to cloud and Kubernetes infrastructure.\n\nNICE TO HAVE\nExperience with Python and Go.\n\nExperience running an OpenFGA, SpiceDB, or similar deployment in production, beyond a proof of concept.\n\nWorking knowledge of OAuth, OIDC, and SCIM at the protocol level.\n\nBENEFITS\nCompetitive compensation, including meaningful equity\n\n(U.S. only) 100% coverage of medical, dental, and vision insurance for employee and dependents\n\nFlexible PTO policy including company wide Winter Break (our offices are closed from Christmas Eve to New Year's Day!)\n\nPaid parental leave\n\nFertility and family-building stipend through Carrot\n\n(U.S. only) Company-facilitated 401(k)\n\nExposure to a variety of ML startups, offering unparalleled learning and networking opportunities.\n\nApply now to embark on a rewarding journey in shaping the future of AI! If you are a motivated individual with a passion for machine learning and a desire to be part of a collaborative and forward-thinking team, we would love to hear from you.\nAt Baseten, we are committed to fostering a diverse and inclusive workplace. We provide equal employment opportunities to all employees and applicants without regard to race, color, religion, gender, sexual orientation, gender identity or expression, national origin, age, genetic information, disability, or veteran status.\nWe are an Equal Opportunity Employer and will consider qualified applicants with criminal histories in a manner consistent with applicable law (by example, the requirements of the San Francisco Fair Chance Ordinance, where applicable).","description_format":"text","description_chars":5114,"description_truncated":false,"requirements":{"experience_years_min":4,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["Equity","Parental leave","Vision insurance"],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"},{"name":"Canada","iso":"CA","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["MLOps","AI Compute & Inference"],"lifecycle":[{"event":"open","at":"2026-09-02T15:55:41Z"},{"event":"close","at":"2026-10-22T18:37:47Z"}],"visa":[],"liveness":null,"pay":{"stated_usd_annual":285000,"is_top_pay":true},"html_url":"https://alion.io/job/baseten-software-engineer-identity-and-authorization","json_url":"https://alion.io/job/baseten-software-engineer-identity-and-authorization.json","meta":{"generated_at":"2026-10-22T20:31:20Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":4569,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-23T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":4399},"rest":"https://alion.io/mcp/rest/get_company?id=4399"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fbaseten-software-engineer-identity-and-authorization"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fbaseten-software-engineer-identity-and-authorization"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fbaseten-software-engineer-identity-and-authorization"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/baseten-software-engineer-identity-and-authorization\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fbaseten-software-engineer-identity-and-authorization"}]}