Staff Software Engineer, Identity & Authorization

Replit is the agentic software creation platform that enables anyone to build applications using natural language. With millions of users worldwide, Replit is democratizing software development by removing traditional barriers to application creation.

Product Platform builds and owns the shared foundations the rest of Replit is built on, spanning the full stack so every other team can ship features safely and quickly.

Identity & Authorization defines how people, agents, sandboxes, and services prove who they are and what they can do. These systems protect critical product and service interactions across Replit's web product, Agent, enterprise controls, and internal services.

Our work is high-leverage and horizontal: when identity and policy are clear, reliable, and easy to adopt, every other team can move faster without rebuilding security controls.

We are a small, collaborative team that values curiosity and clear thinking over pedigree, and we work in the open by bringing each other the problem rather than just the request. We care more about how you reason and build than the route you took to get here.

As a Software Engineer, you will design, build, and operate the identity and authorization systems that protect critical interactions on Replit, including Agent acting on behalf of a user or holding their own identity.

The work is guided by a few simple questions:

• 💰 Competitive Salary & Equity

  💹 401(k) Program with a 4% match (US Only)

  ⚕️ Health, Dental, Vision and Life Insurance

  🩼 Short Term and Long Term Disability

  🚼 Paid Parental, Medical, Caregiver Leave

  🏝 Flexible Time Off (FTO) + Holidays

  🚗 Commuter Benefits (In-Office & US Only)

  📱 Monthly Wellness Stipend

  🧑‍💻 Autonomous Work Environment

  🖥 In Office Set-Up Reimbursement (In-Office Only)

  🚀 Quarterly Team Gatherings

  ☕ In Office Amenities (In-Office Only)

• →

  Design and operate central authorization interfaces with typed principals, actions, resources, decisions, explainable deny reasons, privilege attenuation, delegations, and obligations

• →

  Evolve enterprise roles, groups, app access, entitlements, and workspace policy so common cases stay simple and advanced cases remain possible

• →

  Build and operate Replit's Security Token Service and workload identity using OAuth 2.0 token exchange, JWT/OIDC, SPIFFE/SPIRE, and mTLS

• →

  Threat-model delegation, confused-deputy risks, and cross-tenant movement, then make secure, fail-closed behavior the default

• →

  Lead compatible migrations with shadow evaluation, feature gates, telemetry, and rollback plans, and own the SLOs, incidents, and operational health of the systems you ship

• →

  Partner with Agent, Connectors, Enterprise, Security, and Infrastructure teams to turn product requirements into shared platform primitives

• →

  Research and develop new innovative approaches to Authx in the Agentic world

• Self-driving Company

• Replit Agent at Scale

• AI Adoption

• Build Open-Source Apps

   

• Operating Principles

• Reasons not to work at Replit

To achieve our mission of making programming more accessible around the world, we need our team to be representative of the world. We welcome your unique perspective and experiences in shaping this product. We encourage people from all kinds of backgrounds to apply, including and especially candidates from underrepresented and non-traditional backgrounds.