Impress employers and recruiters.
Choose from hundreds of resume examples.
Impress employers and recruiters.
Choose from hundreds of resume examples.
Target Resume Now
About the Role
You'll work across the open-source core and the enterprise platform, making architectural decisions that shape Better Auth’s public APIs, plugin system, runtime compatibility, reactive client behavior, and security model. This is a leadership role in an open-source product where you'll drive technical direction, maintain quality, mentor contributors, and make thoughtful decisions about product boundaries.
Responsibilities
- Core framework architecture — auth endpoints, sessions, cookies, request context, middleware, and before/after hook pipelines
- Public API and type system design — shaping stable, ergonomic interfaces across the framework, plugins, and client libraries
- Plugin and package architecture — evolving Better Auth’s extension model across the core library and first-party packages
- Reactive client systems — designing and evolving the typed client, shared session state model, and cross-framework reactive architecture that power React, Vue, Svelte, Solid, and Lynx
- Runtime and framework compatibility — ensuring Better Auth works correctly and consistently across Node.js, Bun, Deno, Cloudflare Workers, and multiple framework integrations
- Security and identity protocols — OAuth2, OIDC, SAML, SCIM, passkeys, CSRF protections, origin validation, rate limiting, and secure session handling
- Enterprise platform foundations — helping define and build capabilities around org management, provisioning, admin workflows, observability, analytics, and operational tooling
- OSS/commercial product boundaries — deciding what belongs in the open-source framework, what belongs in the enterprise layer, and how the two compose cleanly
- Release quality and contributor experience — code review, issue triage, docs, tests, migration strategy, and safe upgrade paths for users
Requirements
- 7+ years of software engineering experience building and shipping production systems in TypeScript
- Comfortable with complex TypeScript generics, conditional types, mapped types, template literal types, and inference, and know how to use them to design developer-facing libraries
- Think carefully about ergonomics, backwards compatibility, migration paths, and the long-term consequences of public API decisions
- Comfortable working in auth-heavy, security-sensitive systems and can reason across sessions, tokens, redirects, CSRF, OAuth2/OIDC, and cross-runtime constraints
- Communicate clearly, write thoughtful reviews, maintain a high quality bar, and understand the responsibility that comes with building APIs other developers depend on
- Comfortable taking ambiguous, high-leverage work from idea through implementation, release, and follow-through
Skills
- TypeScript
- API Design
- Security
- Platform Judgment
- Open Source Leadership
- Ownership
- OAuth2
- OIDC
- SAML
- SCIM
- Passkeys
- CSRF protections
- Origin validation
- Rate limiting
- Secure session handling
- Org management
- Provisioning
- Admin workflows
- Observability
- Analytics
- Operational tooling
- Node.js
- Bun
- Deno
- Cloudflare Workers
- React
- Vue
- Svelte
- Solid
- Lynx
Work Type
- Full-time
Experience Level
- 7+ years
Salary/Compensations
- Competitive salary + meaningful equity with room to grow
Benefits
- Health, dental, vision
- Unlimited PTO (that we actually encourage you to use)
- SF office access + daily catered lunches & snacks
About the Company
- Better Auth is the most comprehensive authentication framework for TypeScript.
- We're the most upvoted YC Launch in history and are used by thousands of developers shipping everything from startup projects to enterprise products.
- We’re a small team building foundational infrastructure that other developers depend on, so the bar is high: every decision we make affects security, correctness, and developer experience at scale.
- We’re also building an enterprise layer on top of the open-source framework for teams that need more operational, organizational, and compliance-oriented capabilities.
- We’re now extending that work into agent auth: secure identity, approval, delegation, and capability grants for AI agents operating across runtimes, services, and organizations.
Equal Opportunity
- Better Auth is an equal opportunity employer. We believe diverse teams build better security infrastructure.