The Most Comprehensive Authentication Framework. Backed by Peak XV and Y Combinator.
About the role
We’re looking for a strong engineer to help build the identity provider, approval systems, and control plane for agent auth. This is a high-leverage role at the boundary of protocol design, security, and product implementation. You’ll work on the trust model behind agent authorization: signed grants, offline verification, request signing, approval flows, delegation, revocation, and least-privilege capability systems. You’ll help turn emerging protocol decisions into real issuer, approval, and platform systems.
What they're looking for
- Experience level — 7+ years building production systems in security-sensitive or protocol-heavy domains
- Security-sensitive systems — strong experience building systems where correctness, trust, and misuse resistance matter
- Token and key systems — hands-on experience with signed token formats, key lifecycle, and binding tokens to specific requests in real systems
- Secure-by-default product judgment — strong instincts for making secure behavior the easy default, and for knowing when ergonomics and security are genuinely in tension versus when thoughtful design can deliver both
- Systems implementation — strong TypeScript and backend engineering ability, with comfort building production libraries, APIs, control planes, and developer-facing tooling
- Collaboration and ownership — low ego, high conviction, and the ability to work across protocol, product, and engineering details without waiting for perfect specs
More about this role
Better Auth is the most comprehensive authentication framework for TypeScript. We're the most upvoted YC Launch in history and are used by thousands of developers shipping everything from startup projects to enterprise products.
We’re a small team building foundational infrastructure that other developers depend on, so the bar is high: every decision we make affects security, correctness, and developer experience at scale. We’re also building an enterprise layer on top of the open-source framework for teams that need more operational, organizational, and compliance-oriented capabilities.
We’re now extending that work into agent auth: secure identity, approval, delegation, and capability grants for AI agents operating across runtimes, services, and organizations.
We’re looking for a strong engineer to help build the identity provider, approval systems, and control plane for agent auth.
This is a high-leverage role at the boundary of protocol design, security, and product implementation. You’ll work on the trust model behind agent authorization: signed grants, offline verification, request signing, approval flows, delegation, revocation, and least-privilege capability systems....
Browse similar: Startup jobs · San Francisco Bay Area