Impress employers and recruiters.
Choose from hundreds of resume examples.
Impress employers and recruiters.
Choose from hundreds of resume examples.
Target Resume Now
About the Role
We are looking for a strong engineer to help build the identity provider, approval systems, and control plane for agent auth. This is a high-leverage role at the boundary of protocol design, security, and product implementation, focusing on the trust model behind agent authorization.
Responsibilities
- Build issuer systems, including signed grant issuance, JWKS publishing, key rotation, and verifier-facing trust primitives.
- Design and implement approval infrastructure for device, backchannel, host-mediated, and service-mediated flows.
- Develop runtime and operator controls for registration, trust, default budgets, delegated execution, and admin review.
- Define capability policies, including least-privilege grants, constraints, bounded-use authorization, and revocation behavior.
- Shape the verification model, considering offline verification, request signing, replay protection, and cache behavior.
- Build control plane and organization policy features, such as tenant-level trust configuration and auditability.
- Create a platform for agents to securely access services before native agent auth support exists.
- Implement issuer, verifier, SDK, and IDP primitives across the Better Auth plugin, client SDK, and platform surfaces.
Requirements
- 7+ years building production systems in security-sensitive or protocol-heavy domains.
- Strong experience building systems where correctness, trust, and misuse resistance are critical.
- Ability to reason about complex tradeoffs in security and authorization.
- Hands-on experience with signed token formats, key lifecycle management, and binding tokens to requests.
- Strong instincts for making secure behavior the easy default.
- Strong TypeScript and backend engineering ability, with experience building production libraries, APIs, control planes, and developer-facing tooling.
- Low ego, high conviction, and the ability to work across protocol, product, and engineering details.
Skills
- TypeScript
- Backend Engineering
- API Development
- Control Plane Development
- Developer Tooling
- Signed Token Formats
- Key Lifecycle Management
- Capability-based Authorization
- Open Source Infrastructure
- Enterprise Identity
- SSO
- SCIM
- Protocol Design
- Security Systems
- Trust Models
Experience Level
- 7+ years
Salary/Compensations
- Competitive salary + meaningful equity with room to grow
Benefits
- Health, dental, vision
- Unlimited PTO
- SF office access
- Daily catered lunches & snacks
About the Company
- Better Auth is the most comprehensive authentication framework for TypeScript.
- We're the most upvoted YC Launch in history and are used by thousands of developers.
- We’re a small team building foundational infrastructure that other developers depend on.
- We’re also building an enterprise layer on top of the open-source framework.
- We’re now extending that work into agent auth: secure identity, approval, delegation, and capability grants for AI agents.
Equal Opportunity
- Better Auth is an equal opportunity employer.
- We believe diverse teams build better security infrastructure.