Founding Engineer, Identity

What you’ll do

• Extend the Gatekeep server: WebAuthn ceremonies, OIDC flows, key rotation and token lifecycles.
• Build multi-tenancy, from per-tenant signing keys to custom domains with automatic TLS.
• Ship the developer dashboard: apps, redirect URIs, branding, logs.
• Keep it fast, small and correct. Write the tests that pin behaviour to the spec.
• Talk to early customers and turn what they need into what we build next.

What we’re looking for

• You’ve built and run production backend systems, ideally in TypeScript.
• You understand HTTP, cookies, CORS and TLS well enough to explain them.
• You’ve worked with OAuth 2.0 or OpenID Connect, or you’re excited to go deep on them.
• You care about security by default and can say no to complexity.

Nice to have

• Experience with WebAuthn / FIDO2, JOSE (JWT, JWK) or applied cryptography.
• You’ve operated SQLite or Postgres under real load.
• You’ve written a spec, an RFC, or docs people actually read.