5 hours ago
Base Salary
$250k - $375k/yr
Responsibilities
- Design and operate central authorization interfaces supporting typed principals, actions, resources, decisions, denial explanations, privilege attenuation, delegations, and obligations.
- Evolve enterprise roles, groups, app access, entitlements, and workspace policies for simple and complex organizations.
- Build and operate the Security Token Service and workload-identity systems using OAuth 2.0 token exchange, JWT/OIDC, SPIFFE/SPIRE, and mTLS.
- Threat-model delegation, confused-deputy risks, and cross-tenant movement while making secure, fail-closed behavior the default.
- Lead compatible security-system migrations using shadow evaluation, feature gates, telemetry, and rollback plans.
- Own SLOs, incidents, reliability, and operational health for shipped systems.
- Partner with Agent, Connectors, Enterprise, Security, and Infrastructure teams to develop shared platform primitives.
- Research and develop new approaches to authorization in agentic systems.
Requirements
- Experience shipping and operating security-sensitive backend or distributed systems in production, including reliability, performance, incidents, and observability.
- Deep experience with authentication, authorization, or identity systems, including areas such as OAuth 2.0/OIDC, JWT, mTLS, identity federation, RBAC, ReBAC, PBAC, Zanzibar, Macaroons, Biscuits, Cedar, or policy engines.
- Strong understanding of multi-tenant security, least privilege, delegation, privilege attenuation, auditability, and threat modeling.
- Experience migrating security-sensitive systems without breaking callers, using approaches such as typed contracts, shadow evaluation, and staged enforcement.
- Fluency in at least one production backend stack; Replit’s systems use TypeScript, Go, Rust, Postgres, gRPC/Protobuf, Kubernetes, Envoy, and Restate.
- Ability to communicate tradeoffs across security, reliability, latency, product experience, delivery speed, and maintainability.
Benefits
- Competitive salary and equity.
- 401(k) program with a 4% match for US employees.
- Health, dental, vision, and life insurance.
- Short-term and long-term disability coverage.
- Paid parental, medical, and caregiver leave.
- Flexible time off and holidays.
- Commuter benefits for in-office US employees.
- Monthly wellness stipend.
- Autonomous work environment.
- In-office setup reimbursement for in-office employees.
- Quarterly team gatherings.
- In-office amenities.
Tech Stack
About Replit
Replit builds a browser-based software development platform with an AI coding agent, collaborative IDE, and built-in deployment for individuals, teams, and businesses. It offers freemium and paid plans for developers and organizations, plus hosting and enterprise features used to create and run web applications. Founded in 2016 and headquartered in Foster City, California, Replit is privately held and serves a global user base.