Responsibilities
- Own the provisioning lifecycle for agent and user tool access, including enrollment, granting, rotation, and revocation.
- Design policy authoring, versioning, and runtime enforcement for agent, tool, scope, and data access decisions.
- Develop continuous posture and risk assessment for connected tools and SaaS systems.
- Improve structured, queryable instrumentation and telemetry for tool calls on the gateway request path.
- Extend OAuth 2.1, SSO, and SCIM integrations so provisioning and policies remain bound to enterprise identity.
- Define detection, response, and containment capabilities for anomalous, abusive, or vulnerable agent-tool activity.
- Set technical direction for StackOne’s agent-access governance roadmap in partnership with engineering, security, platform, and company leadership.
Requirements
- Strong software engineering fundamentals and experience owning a production system end to end.
- Experience building or operating an API gateway or management platform, MDM/UEM system, EDR/XDR product, or comparable policy-driven provisioning, posture, or access-control platform.
- Experience building a policy or rules engine covering authoring, evaluation, enforcement, and versioning.
- Practical experience with OAuth/OIDC, SAML, SSO, SCIM, scopes, grants, token lifecycles, and least-privilege access.
- Experience instrumenting and monitoring systems on the request path while managing latency trade-offs.
- Experience with LLM or AI experiences, MCP servers, AI agents, and the governance and guardrail challenges associated with AI usage.
- Security experience in vulnerability management, threat detection, or compliance posture is a plus.
- Experience shipping developer-configured platform or API products is a plus.
- Experience contributing publicly through open source, specifications, or technical writing is a plus.
Benefits
- High-ownership role on a strategic product pillar.
- Reports to engineering leadership and partners closely with the founders and security and platform engineers.
- Opportunity to set technical direction for agent-access governance.
About StackOne
StackOne is the integration infrastructure for AI agents to act. 200+ connectors, 10k+ actions, and the AI builder tools to customize or build your own. StackOne turns AI agents into powerhouse that can act like your and for you. At the core is Falcon, our state-of-the-art, code-first, execution engine. Falcon executes multi-step AI actions accurately, reliably, and securely, optimizing for tool-calling accuracy, token efficiency, and low latency. Falcon interfaces with your agent via MCP, A2A, or API calls for traditional apps RPCs and any app interface (REST, SOAP, GraphQL, Private APIs, browserless). StackOne’s managed infrastructure handles multi-tenant authentication, permissions, and observability out of the box—so teams can focus on designing agency, not building the plumbing. We’re built for enterprise trust: SOC2, GDPR, HIPAA, and CCPA compliant. Real-time execution with no data storage. Ship faster. Execute better. Scale with confidence. StackOne is the platform for production-ready autonomous agents.