[Remote] Software Engineer, Agent Auth Experience
Note: The job is a remote job and is open to candidates in USA. Render is building the modern cloud platform for developers creating AI-native applications. They are looking for a Software Engineer with a strong focus on identity and security to design and implement authentication and authorization systems for their platform.
Responsibilities
- Design and ship authentication and authorization systems for users, agents, and services including credential scoping, SSO, SCIM provisioning and fine-grained permission models
- Evolve Render's authorization model toward clear permissions and scopes for applications, environments, projects, and other platform resources
- Own the security experience across the stack, from the interfaces used to manage features through to the APIs, data models and systems behind them
- Build the controls and audit trails customers use to define, enforce and understand how people, services and agents act within their systems
- Design shared auth APIs and primitives, then work closely with Product, Design, Security, and other Render teams to drive adoption adoption
- Operate authentication and authorization systems that customers and other teams depend on, including observability, safe rollouts, incident response, and on-call
Skills
- 6+ years of experience shipping and operating production systems
- You've built customer-facing authentication or authorization features and understand how security choices shape the product experience
- You've designed and operated systems where correctness, availability, and safe rollout matter. You are comfortable working through API, data-model, caching, and migration tradeoffs
- You can balance security and product tradeoffs. You understand why a control exists, the friction it creates and when a simpler design is enough
- A track record of taking ambiguous projects from design through production while working with product, design, and engineers in other parts of the company
- Hands-on experience with OAuth, OpenID Connect, SAML, SCIM, JWTs or other authentication methods
- Experience with multi-tenant authorization models such as RBAC, ABAC, or ReBAC, including policy engines or fine-grained authorization systems
- Experience with workload identity, short-lived credentials, secrets management, privileged access, or security controls for services and agents
- Experience building developer platforms, cloud infrastructure, identity product or SaaS products where APIs and backwards compatibility matter
- Familiarity with compliance frameworks such as SOC 2 or ISO 27001 and an ability to turn those requirements into security improvements for all customers
- Contributions to open-source auth/security tooling
Benefits
- 4 weeks of paid vacation.
- 14 weeks of fully paid parental leave for all parents to bond with a newly born, adopted, or fostered child.
- We will also work with you to create a supportive plan of return.
- Long-term disability, life insurance, and 401K plans.
- 100% employer-paid medical coverage and 99% employer-paid dental and vision coverage for you and a dependent.
- FSAs and HSAs are available as well.
- Monthly lifestyle stipend for wellness, mental health and therapy, hobbies, etc.
- Monthly cell phone and internet subsidy.
- Commuter benefits for Renders in the Bay Area, and home office stipends for remote Renders.
- Continuous learning benefits & related support.
Company Overview