# Staff Software Engineer, Identity & Authorization at Replit

- Company: Replit
- What the company does: Describe what you want. Replit builds it. Get a working app or website in minutes. No coding required. Backed by Y Combinator and a16z.
- Company website: https://replit.com
- Type: Startups
- Level: Senior
- Location: Foster City, CA
- Work setup: Remote
- Pay: $250K to $375K base salary per year (USD)
- Posted: 2026-09-11
- Apply by: 2026-10-26
- Apply: https://jobs.ashbyhq.com/replit/790afe73-238a-489c-875e-ac4e15780112
- Page: https://www.1752.vc/careers/jobs/replit-staff-software-engineer-identity-and-authorization/

## About the role

As a Software Engineer , you will design, build, and operate the identity and authorization systems that protect critical interactions on Replit, including Agent acting on behalf of a user or holding their own identity. Design and operate central authorization interfaces with typed principals, actions, resources, decisions, explainable deny reasons, privilege attenuation, delegations, and obligations

## What they're looking for

- Experience shipping and operating security-sensitive backend or distributed systems in production, including reliability, performance, incidents, and observability
- Depth in authentication, authorization, or identity systems, such as OAuth 2.0/OIDC, JWT, mTLS, Identity Federation, RBAC, ReBAC, PBAC, Zanzibar, Macaroons, Biscuits, Cedar, or policy engines. You do not need prior experience with every item
- Strong understanding of multi-tenant security, least privilege, delegation, privilege attenuation, auditability, and threat modeling
- Experience migrating security-sensitive systems without breaking callers. Approaches can include typed contracts, shadow evaluation, and staged enforcement
- Fluent in at least one production backend stack. Our systems use TypeScript, Go, Rust, Postgres, gRPC/Protobuf, Kubernetes, Envoy, and Restate
- Able to make and communicate tradeoffs across security, reliability, latency, product experience, delivery speed, and long-term maintainability

Tags: Engineering