SlipstreamJobs tracks this role from the company's public career site. Apply directly on the employer's site.
Baseten powers mission-critical inference for leading AI companies including Cursor, Notion, OpenEvidence, Abridge, Clay, Gamma, and Writer. The company recently raised $1.5B in Series F funding led by Altimeter Capital, Conviction Partners, and Spark Capital.
This is a founding role for Baseten's identity and authorization team within enterprise engineering. You will own the identity and access layer of the Baseten platform, including the authorization model, credential systems, and admin experiences that enterprise IT teams use to govern access for organizations like Harvey, HubSpot, and Notion.
You will design and build Baseten's fine-grained authorization system from the ground up to support current customer workflows while providing cleaner, more precise ways to manage access as the platform scales. Authorization at Baseten requires low-latency permission checks at high request volume, consistent contracts and behaviors across the product suite, and strong security guarantees for mission-critical, highly regulated workloads.
Key initiatives include: fine-grained authorization for users, service accounts, and agentic workloads with per-resource permissions at organization, team, and workload scope; programmatic authentication for high-compliance customers using short-lived, workload-based credentials; agent credentials that grant exactly the access needed for a given task; enterprise identity lifecycle including single sign-on, SCIM provisioning, and per-organization session expiry policies; and admin controls for centralized visibility, auditability, and governance over credentials, roles, and access.
Responsibilities include leading identity and authorization projects from problem definition and technical design through implementation, launch, and iteration; designing authorization and credential models that support critical workflows today and can be safely extended as the platform evolves; partnering with product, design, and customer-facing teams to turn enterprise security requirements into durable technical solutions; establishing engineering practices for quality, security, observability, and operational ownership; and providing technical leadership and mentorship as the team grows.
REQUIREMENTS:
- 4-5+ years of experience building production backend systems, including hands-on design and implementation of a product authorization system (per-resource or per-object permissions, relationship-based access control, a policy engine, or fine-grained authorization system in the style of Zanzibar, OpenFGA, SpiceDB, or Cedar)
- Demonstrated end-to-end ownership: taken a system from first design through implementation, production rollout, and iteration with users
- Experience developing and operating multi-tenant systems at scale, where authorization checks sit in the request path and latency and consistency matter
- Comfort working across the full stack, from product and application code to cloud and Kubernetes infrastructure
NICE TO HAVE:
- Experience with Python and Go
- Experience running an OpenFGA, SpiceDB, or similar deployment in production, beyond a proof of concept
- Working knowledge of OAuth, OIDC, and SCIM at the protocol level
