Software Engineer, Agent Auth Experience
Job description
About the role
Render is building a modern cloud platform designed specifically for developers creating AI-native applications. This role focuses on strengthening the identity and security foundations of our platform, ensuring that customers can effectively manage access, permissions, and security controls. You will be responsible for designing, developing, and maintaining core authentication and authorization features that are critical for platform security and user management. The position involves working closely with cross-functional teams to create scalable, reliable, and secure systems that support our expanding customer base and evolving security standards. Your work will directly impact the platform's ability to provide robust security measures while maintaining a seamless user experience.
Key facts
What you'll do
- Develop and implement systems for user, agent, and service authentication and authorization, including credential management, single sign-on (SSO), and detailed permission controls.
- Enhance the platform's authorization architecture to provide clear, flexible access rights for various resources such as applications, environments, projects, and other platform components.
- Integrate security features across the entire technology stack, from user interfaces to backend systems and APIs, ensuring consistent security policies and practices.
- Design and build audit logs, controls, and monitoring tools that enable customers to track actions within their systems, ensuring compliance and security oversight.
- Create reusable, scalable authentication and authorization APIs, collaborating with Product, Design, and other engineering teams to promote widespread adoption and integration.
- Maintain and operate authentication and authorization systems, including regular monitoring, incident response, troubleshooting, and on-call duties to ensure high availability and security.
- Work on improving security protocols, managing trade-offs between usability and security, and implementing best practices for identity management.
- Contribute to the continuous improvement of security standards, policies, and procedures across the platform to meet evolving compliance and security requirements.
- Participate in code reviews, testing, and documentation efforts to ensure high-quality, maintainable, and secure codebases.
- Stay informed about the latest developments in authentication, authorization, and security standards, and incorporate relevant innovations into the platform.
- Collaborate with customer support and security teams to address security issues, vulnerabilities, and customer inquiries related to identity and access management.
Requirements
- At least 6 years of experience designing, building, and operating production systems focused on authentication and authorization.
- Proven experience developing customer-facing authentication or authorization features, with a strong understanding of their impact on user experience and security.
- Demonstrated ability to design and operate systems where reliability, uptime, and security are critical, including managing API design, data models, caching strategies, and system trade-offs.
- Strong understanding of security principles, including credential management, access controls, and secure API design.
- Ability to balance security requirements with product usability, knowing when to implement simple controls versus more complex security measures.
- Experience guiding ambiguous projects from initial concept through to production, working collaboratively with cross-functional teams including Product, Design, and other engineering disciplines.
- Excellent problem-solving skills and the ability to troubleshoot complex security issues in live environments.
- Strong communication skills to articulate security concepts and collaborate effectively across teams.
- Knowledge of industry standards and best practices related to identity and access management.
- Experience with incident response and system monitoring related to security systems.
Nice to have
- Practical experience with standards such as OAuth, OpenID Connect, SAML, SCIM, and JWTs.
- Familiarity with multi-tenant authorization models like Role-Based Access Control (RBAC), Attribute-Based Access Control (ABAC), or Relationship-Based Access Control (ReBAC), including policy engines or granular authorization systems.
- Experience working with workload identity solutions, short-lived credentials, secrets management, privileged access management, or security controls for services and agents.
- Background in building developer platforms, cloud infrastructure, identity products, or SaaS solutions where API stability and backward compatibility are critical.
- Knowledge of compliance standards such as SOC 2 or ISO 27001, and experience translating these standards into practical security enhancements.
- Contributions to open-source security or authentication tools, or active participation in security communities.
Skills & tools
- Authentication systems
- Authorization systems
- Identity management
- Access control mechanisms
- API design and development
- Production system operation and monitoring
Practical notes
- Visa sponsorship may be available for existing visa holders at the company's discretion.
- Render offers 4 weeks of paid vacation, providing ample time for rest and recovery.
- The company provides 14 weeks of paid parental leave to support new parents.
- Long-term disability insurance and life insurance are included as part of the benefits package.
- Medical coverage is fully paid by the employer, ensuring comprehensive health benefits for employees.
- Dental and vision insurance are also employer-paid for employees and their dependents, with 99% coverage.
- Flexible spending accounts (FSAs) and health savings accounts (HSAs) are available to help manage healthcare expenses.
- Monthly stipends are provided to support lifestyle needs, including cell phone and internet costs.
- Home office stipends are available for remote employees to set up a productive workspace.
- Render encourages continuous learning and professional development, supporting employees in acquiring new skills and certifications.
- The company values security, reliability, and collaboration, fostering an environment where security features are integral to product development and customer success.