Product Engineer (Security)

Role overview

A specialized engineering position owning the policy and identity systems that make an enterprise platform trustworthy. Work centers on authentication, authorization, policy enforcement, and credential management, ensuring agents operate with least privilege and full auditability. The team values clarity, direct feedback, and shipping, with AI-native workflows expected as the core working practice.

Responsibilities

- Build authentication flows that integrate with customer identity providers - Design authorization models that express complex access requirements simply - Implement policy engines that enforce rules consistently across distributed environments - Own credential management and secrets handling to ensure agents operate with least privilege and full auditability - Work directly with customers to understand security and compliance requirements, translating them into product capabilities that satisfy rather than frustrate

Requirements

- Production experience building authentication or authorization systems, ideally for enterprise customers with complex requirements - Working knowledge of identity protocols including OAuth, OIDC, and SAML, with the ability to reason about their trade-offs - Experience with policy engines or access control models such as RBAC, ABAC, OPA, or Cedar - Go fluency with the ability to design secure, maintainable systems - Internalized AI-native development workflow with demonstrable productivity gains - Strong opinions on how software should be built, defensible while open to being wrong - Clear communication with customers, founders, and fellow engineers

Benefits and work setup

- Competitive compensation including meaningful equity - Founder-level contributor expectations - Comprehensive health, dental, and vision coverage - Remote-friendly culture with flexible working arrangements - Equipment and tools provided - Equal opportunity employer that evaluates candidates on capability rather than credentials