SlipstreamJobs tracks this role from the company's public career site. Apply directly on the employer's site.
Base is rebuilding America's power grid through distributed battery networks and resilient infrastructure. The Identity Provider and Authorization team is seeking a Senior Backend Software Engineer to design and operate the identity and access control platform that secures all of Base's systems—from employee access to AWS/GCP, service-to-service authentication, and field device identity.
In this role, you will own the platform layer that transforms fragmented access controls into a single, auditable identity system. You'll design core identity primitives including workforce SSO, cloud federation, entitlements-as-code, and workload identity backed by a governed PKI.
Key responsibilities:
- Build and operate Okta as the workforce identity provider, managing SSO, SAML/OIDC integrations, SCIM provisioning, and joiner/mover/leaver automation
- Design authentication policies (MFA, device assurance) and authorization primitives (RBAC, least-privilege role catalogs, break-glass access) for other teams to build on
- Federate cloud access through AWS IAM Identity Center and GCP Workforce Identity Federation, replacing long-lived credentials with short-lived alternatives
- Define and maintain entitlements-as-code in a GitOps monorepo with pull-request-based access grants
- Build workload and headless identity infrastructure using private CA/PKI, AWS Roles Anywhere, GCP WIF-X509, and hardware-backed key custody (Secure Enclave, TPM, YubiKey)
- Define Identity Assurance Level requirements per NIST SP 800-63-3 for internal, partner, and service-to-service access
- Partner with IT, security, and application teams to maintain identity as the shared foundation
This is a rare opportunity to build the identity layer for one of the fastest-scaling energy companies from near-zero, in a hands-on role that values security-critical systems, moving fast without cutting corners, and turning ambiguous scope into durable infrastructure.
Requirements:
- Strong backend engineering experience in Go, Java, or similar systems language
- Experience designing or operating identity systems (SSO/IdP, authn/authz, entitlements, or workload identity)
- Working knowledge of OIDC, SAML, and SCIM, with judgment about when to use each
- Comfort with cryptographic identity primitives (PKI, mTLS, hardware-backed keys)
- High ownership, clear communication, and ability to make durable technical decisions in ambiguous, fast-moving environments
- In-person work expected; Base operates at high intensity with a mission-driven culture
