Runlayer

Member of Technical Staff - Identity

Runlayer
Apply
5 months ago
Remote, United StatesSenior

Responsibilities

  • Architect and implement authentication and authorization systems for MCP servers, including OAuth 2.0, Dynamic Client Registration, and token management.
  • Build and extend the OAuth broker for enterprise identity integrations across multiple vendors.
  • Design secure, auditable identity propagation for AI agents.
  • Integrate with enterprise identity providers and SCIM systems.
  • Define fine-grained access control policies for MCP tools and resources.
  • Collaborate directly with enterprise customers to solve identity and security challenges.
  • Contribute to the MCP Auth specification and help define agent identity standards.

Requirements

  • 5+ years of software engineering experience with significant focus on identity, authentication, or authorization systems.
  • Deep experience with OAuth 2.0 and OIDC, including Dynamic Client Registration, token exchange, and audience restriction.
  • Experience building or integrating with enterprise identity systems such as Okta, WorkOS, Auth0, AWS IAM, or GCP IAM.
  • Strong distributed systems and API security fundamentals.
  • Experience with Python and TypeScript, using a Python/FastAPI backend and TypeScript/React frontend.
  • Comfort working directly with enterprise customers to understand and solve security requirements.
  • Experience with Kubernetes-native authorization patterns or service mesh security is preferred.
  • Background in ML security, including differential privacy or LLM security research, is preferred.
  • Experience with identity for multi-tenant SaaS platforms is preferred.
  • Familiarity with the MCP specification is preferred.
  • Proficiency with AI-assisted development tools such as Claude Code or Cursor is expected.

Benefits

  • Competitive salary and equity package.
  • Four weeks of paid vacation, paid sick leave, and paid parental leave.
  • Professional development budget for conferences, courses, and certifications.
  • Choice of laptop and accessories.
  • Comprehensive health, dental, and vision coverage.
  • Opportunities to work directly with enterprise customers.
Runlayer

About Runlayer

11-50 employees

Give every employee the golden path to use agents, then watch adoption multiply. AI enablement and control in one platform. The default for AI-native teams like Instacart, Gusto, Lemonade, dbt Labs, and AngelList. Backed by Khosla and Felicis. Based in NYC & SF.

Contact me