SlipstreamJobs tracks this role from the company's public career site. Apply directly on the employer's site.
Supabase is hiring a Product Manager to own the Auth product surface—the tools developers use to authenticate and authorize end users and manage identity. You'll oversee email, phone, and social login; passkeys and MFA; enterprise SSO; OAuth 2.1 server; auth hooks; and support for organizations and multi-tenant applications.
You'll collaborate with customers across the spectrum: indie developers, startups, SaaS teams, and enterprises. You'll own problem statements and solution rationale for the Auth roadmap, working closely with Engineering, Design, and GTM to shape the developer experience. You'll define how Auth works for AI agents on Supabase. You'll use data to understand how developers use Auth features—where they succeed, where they get stuck—and prioritize what to tackle first. You'll keep teams aligned on the plan of record: what's coming, why, and in what order.
Supabase is a fully remote, globally distributed company (~400 team members, 60+ countries) that has raised over $1B, including a $500M Series F. The company is built by developers for developers and operates asynchronously with a strong open-source ethos.
REQUIREMENTS:
Must Have:
- 5+ years of Product Management experience on developer tools, or equivalent depth as an ex-founder. You're comfortable reviewing architecture docs, following design discussions, and advocating for users in trade-offs.
- Shipped standards-based auth or identity products. You've owned OAuth/OIDC, SAML, SCIM, sessions, or token design, and know from experience where each breaks for customers.
- Work comfortably with corporate buyers and developers. You can navigate a CISO's security review and an indie developer's bug report in the same week. You have intuition on which enterprise asks are real value-adding requirements versus checkbox items.
- Comfortable with Postgres and familiar with row-level security.
- Work async by default. You make decisions in writing and move work forward without meetings.
Strong Signals:
- Owned auth or identity inside an integrated cloud platform.
- Ran an organizations, tenancy, or SSO+SCIM launch from start to finish.
- Designed auth for agents or other automated systems: OAuth for MCP clients, machine-to-machine credentials, scoped tokens.
- Shipped something using Supabase.
