Impress employers and recruiters.
Choose from hundreds of resume examples.

Target Resume Now

Tailor your resume to this Senior Engineer, Agentic Identity role.

Rezi rewrites your resume against Baselayer's job description. Free.

Resume score gauge reading 58 out of 100

Don't guess if your resume is good enough.

See how it scores against the Senior Engineer, Agentic Identity posting at Baselayer — free, in seconds.

About the Role

We're building KYA (Know Your Agent) - a cryptographic identity substrate that replaces self-assertion with third-party-issued credentials, verifiable by any counterparty. We're hiring an engineer to own a meaningful surface of the substrate and ship it to production.

Responsibilities

Build and maintain the runtime issuer/mint: OAuth Token Exchange (RFC 8693), JWS credentials (RFC 7515/7519, SD-JWT-VC), and Merkle audit log with real-time revocation.
Own and evolve the wire format and claim registry: JWT profile, verification_level/verification_method enums, and eIDAS/NIST IAL/FATF CDD crosswalk.
Implement sub-millisecond JWS verification and Web Bot Auth signature checks (RFC 9421) at the HTTP edge for counterparty CDNs, merchants, and publisher paywalls.
Build and maintain Passport - the user's cloud-resident principal account with canonical handle, KYC/KYB record, authorized-operators list, audit feed, and authenticator binding.
Develop operator integration: embedded KYB onboarding inside first OAuth 2.0 consent, per-operator opt-in, and webhook delivery via Svix.

Requirements

Shipped systems where cryptographic correctness was load-bearing: OAuth/OIDC IdP, token issuer, signing service, HSM-backed signer, passkey/WebAuthn flow, or similar.
Fluent in Python and Go, or strong in one with a track record of learning the other quickly.
Reads RFCs as primary sources and holds informed opinions on JWK thumbprint canonicalization, pairwise-sub derivation, and Signature-Input header serialization.
Deep understanding of the distinction between identity and authorization, mandate and claim, snapshot and live state.
Production experience with async Python on Postgres, including migration safety and observability.

Skills

Python
Go
OAuth/OIDC
Token issuer
Signing service
HSM-backed signer
Passkey/WebAuthn
JWK thumbprint canonicalization
Pairwise-sub derivation
Signature-Input header serialization
Async Python
Postgres
Verifiable credentials
SSI
DID
SD-JWT-VC
OID4VC
W3C VC stack
Certificate Transparency
Trillian
Append-only-log
KYC/KYB pipeline
eIDAS/FATF CDD
Edge/CDN engineering
Cloudflare Workers
Fastly Compute
Envoy filters
mTLS
AP2
x402
MPP
UCP
Mastercard VI specs

Location

SF
Hybrid

Work Type

Hybrid
In-office 4 days per week

Experience Level

Mid-level
Senior

Salary/Compensations

$230,000 – $340,000

Benefits

Flexible PTO
Competitive compensation with equity
100% health, dental, and vision premiums covered
401(k) with company match
HSA contributions
$250 monthly gym stipend
Transparency and radical candor

About the Company

Baselayer is the identity layer for institutions across the United States — the most complete business graph in America and every human tied to it.
We fuse public records, IRS data, sanctions lists, web signals, and fraud telemetry from 2,200+ financial institutions into a single graph that resolves any business and the humans behind it in milliseconds.
Today we're trusted by over 20% of financial institutions in America — including FIS, Rho, Socure and leading loan infrastructure providers.
The graph is becoming infrastructure for anyone who needs to know if a business is real and worth trusting: gig platforms, marketplaces, AI companies, and commerce infrastructure at scale.
Trust is the substrate of every financial transaction. We're rebuilding it.