Impress employers and recruiters.
Choose from hundreds of resume examples.
Impress employers and recruiters.
Choose from hundreds of resume examples.
Tailor your resume to this Software Engineer, Backend (Security) role.
Rezi rewrites your resume against Base Power Company's job description. Free.
Tailor your resume to this Software Engineer, Backend (Security) role.
Rezi rewrites your resume against Base Power Company's job description. Free.
Don't guess if your resume is good enough.
See how it scores against the Software Engineer, Backend (Security) posting at Base Power Company — free, in seconds.
Don't guess if your resume is good enough.
See how it scores against the Software Engineer, Backend (Security) posting at Base Power Company — free, in seconds.
About the Role
We are seeking Software Engineers to build the Identity Provider and Authorization platform that decides who — and what — can access Base's systems. This role will own the platform layer that turns fragmented, ad hoc access into a single, auditable identity system. You will design the core primitives for identity and access: workforce SSO, cloud federation, entitlements-as-code, and workload identity backed by a governed PKI. The ideal candidate is a hands-on engineer who takes security-critical systems seriously, moves fast without cutting corners on least privilege, and can turn a still-forming scope into durable infrastructure other engineers build on.
Responsibilities
- Build and operate Okta as Base's workforce identity provider — SSO, SAML/OIDC app integrations, SCIM provisioning, and joiner/mover/leaver lifecycle automation.
- Design authentication policy (MFA, device assurance) and authorization primitives (RBAC, least-privilege role catalog, break-glass access) that other teams can safely build on.
- Federate cloud access through AWS IAM Identity Center and GCP Workforce Identity Federation, replacing long-lived IAM users and service-account keys with short-lived credentials.
- Define and maintain entitlements-as-code: every role, group mapping, and access grant lives in the GitOps monorepo as a reviewable pull request.
- Build workload and headless identity infrastructure — private CA/PKI, AWS Roles Anywhere, GCP WIF-X509, and hardware-backed key custody (Secure Enclave, TPM, YubiKey).
- Define Identity Assurance Level requirements, per NIST SP 800-63-3, for internal, partner, and service-to-service access.
- Partner with IT, security, and application teams to keep identity, groups, and tokens as the shared foundation, while apps continue to own their own authorization business logic.
Requirements
- Strong backend engineering experience in Go, Java, or a similar systems language.
- Experience designing or operating identity systems — SSO/IdP, authn/authz, entitlements, or workload identity.
- Working knowledge of OIDC, SAML, and SCIM, and judgment about when to use each.
- Comfort with cryptographic identity primitives — PKI, mTLS, or hardware-backed keys.
- High ownership, clear communication, and comfort making durable technical decisions in ambiguous, fast-moving environments, including scope that's still being defined.
Skills
- Go
- Java
- OIDC
- SAML
- SCIM
- PKI
- mTLS
- Hardware-backed keys
- SSO/IdP
- Authentication/Authorization
- Entitlements
- Workload identity
Location
- In-person
Work Type
- Full-time
Experience Level
- Mid-level
- Senior
About the Company
- Base is America’s next-generation power company. We’re rebuilding the foundation of modern civilization–electricity–by deploying a vast network of distributed batteries that is transforming today’s fragile, centralized grid into a resilient and abundant system. We are engineers, operators, and creatives solving some of the most complex, interdisciplinary challenges of our time.
- Base is a startup, which means priorities shift and evolve quickly.
- Our Values: First Principles Thinking, Operate at Base Pace, Give & Get Feedback, Everyone’s an Owner, Strong Opinions, Loosely Held, Committed to the Mission, Fun & Optimism Coexist with Grit.