← All roles

Senior Engineer, Agentic Identity

Baselayer· Engineering
Apply on company site
Hybrid (SF)$230k - $340kfull-timePosted 3w ago

About the role

Senior engineer role building cryptographic identity substrate for Know Your Agent (KYA), including issuer mint, edge verification, Passport, and audit/log infrastructure to support agentic commerce with verifiable credentials.

Responsibilities

  • Build and maintain the runtime issuer/mint: OAuth Token Exchange (RFC 8693), JWS credentials (RFC 7515/7519, SD-JWT-VC), and Merkle audit log with real-time revocation.
  • Own and evolve the wire format and claim registry: JWT profile, verification_level/verification_method enums, and eIDAS/NIST IAL/FATF CDD crosswalk.
  • Implement sub-millisecond JWS verification and Web Bot Auth signature checks (RFC 9421) at the HTTP edge for counterparty CDNs, merchants, and publisher paywalls.
  • Build and maintain Passport - the user's cloud-resident principal account with canonical handle, KYC/KYB record, authorized-operators list, audit feed, and authenticator binding.
  • Develop operator integration: embedded KYB onboarding inside first OAuth 2.0 consent, per-operator opt-in, and webhook delivery via Svix.
  • Work across a Python 3.13 monorepo (FastAPI, Cloud Tasks, Cloud Run, SQLModel/SQLAlchemy) and Go for performance-critical substrate components.

Qualifications

  • Shipped systems where cryptographic correctness was load-bearing: OAuth/OIDC IdP, token issuer, signing service, HSM-backed signer, passkey/WebAuthn flow, or similar.
  • Fluent in Python and Go, or strong in one with a track record of learning the other quickly.
  • Reads RFCs as primary sources and holds informed opinions on JWK thumbprint canonicalization, pairwise-sub derivation, and Signature-Input header serialization.
  • Deep understanding of the distinction between identity and authorization, mandate and claim, snapshot and live state.
  • Production experience with async Python on Postgres, including migration safety and observability.

Skills

Required:OAuth/OIDC and token issuancePythonGoCryptographic protocolsJWK/JWT
Nice to have:Edge security and CDN integration

Benefits

  • Time off when you need it: Flexible PTO
  • In-person energy: SF-based, 4 days in office
  • Competitive compensation with equity
  • Career rocket fuel: foundational work with startup founders
  • Benefits on us: 100% health, dental, vision premiums
  • 401(k) with company match
  • HSA contributions included
  • Stay healthy: $250 monthly gym stipend
  • Lunch stipend
  • A seat at the table: transparent culture with open voice
Last updated Oct 11, 2026. Interested? Apply on the company site.
Baselayer logo

About Baselayer

The AI Platform for Business Risk

Baselayer: Business Identity Verification, Risk, & Fraud

IdentityCreditFraudOnboardingKYBRiskAutomation
Company profileWebsite

More open roles at Baselayer