Software Engineer, Identity
Keycard Labs3 months ago
Remote, United States or Remote, CanadaStaff+
Responsibilities
- Design and build Keycard’s core identity, authentication, authorization, and data systems.
- Develop the control plane for identity propagation, policy enforcement, audit logging, and runtime governance.
- Build dynamic, multi-tenant, high-performance distributed services for cloud, edge, and hybrid deployments.
- Create SDKs and APIs that provide developers with a seamless and trusted identity experience.
- Collaborate directly with founders, product, design, and SDK and platform engineers.
- Help shape Keycard’s internal agent-native engineering organization and practices.
Requirements
- Deep experience building and operating identity, authentication, and authorization systems.
- Knowledge of OAuth, SCIM, OIDC, mTLS, and related identity primitives.
- Strong distributed-systems design skills covering security, multi-tenancy, reliability, consensus, transactionality, and extensible data models.
- Fluency in Go, Rust, or similar programming languages, with the ability to work across core systems, infrastructure, SDKs, and APIs.
- Ability to make effective 0-to-1 technical trade-offs while establishing long-term foundations.
- Strong technical leadership, communication, and mentoring skills.
- Experience with agents such as Claude Code, Cursor, or MCP is a plus.
- Experience with WASM, plugin frameworks, dynamic policy engines, developer-facing APIs or SDKs, open-source identity or security projects, CNCF projects, or developer ecosystems is a plus.
Benefits
- Health, dental, vision, and paramedical coverage for the employee and family.
- Four weeks of vacation, 11 statutory holidays, and one volunteer day annually.
- Remote-first work with asynchronous collaboration and hiring focused in North and South America.
- New MacBook Pro, $500 peripheral stipend, and access to AI tools.
- Generous equity package with a four-year vesting period and one-year cliff.
About Keycard Labs
Keycard is on a mission to redefine machine identity for the Internet—helping developers seamlessly connect people, agents, and services across networks, clouds, and applications. As AI-driven workflows grow more complex, Keycard’s dynamic, identity-based credentials ensure every agent and service operates with precise, contextual permissions. We’re building a global identity network backed by open protocols—empowering distributed systems to adapt, scale, and maintain cryptographically verifiable trust. By rethinking secret management from first principles, we aim to delight developers, meet the performance needs of platform engineers, and set a new standard for cloud-era security in an inclusive, collaborative environment.