Software Engineer, Identity Platform

OpenRouter is a routing and infrastructure layer that gives teams one API across large language models from many providers. This is its first Identity Platform engineer, owning authentication and authorization across the inference gateway, marketplace and agent products.

You would unify API keys, sessions, OAuth and OIDC tokens and MCP logins into one principal and one permission model, build delegated access so apps and agents can act for users without handling secrets, add workload identity federation, and make enterprise SSO and SCIM provisioning work first time. Fraud and account-takeover defences, audit logging and keeping auth fast on the hot path of every request are part of it too.

They ask for 5+ years building production identity systems, deep knowledge of OAuth 2.x, OIDC, SAML, SCIM and JWTs, experience designing multi-tenant authorization models, and strong TypeScript, SQL and Postgres.

Pay is $215,000 to $285,000. Remote, US.