Software Engineer, Agent Auth Experience

Render is building a modern cloud platform for developers creating AI-native, full-stack, multi-service applications. The company is seeking a software engineer to build authentication, authorization, and access-management primitives, including SSO, RBAC, audit logging, scoped credentials, and SCIM provisioning, while operating secure and reliable platform systems.

Responsibilities:

• Design and ship authentication and authorization systems for users, agents, and services including credential scoping, SSO, SCIM provisioning and fine-grained permission models
• Evolve Render's authorization model toward clear permissions and scopes for applications, environments, projects, and other platform resources
• Own the security experience across the stack, from the interfaces used to manage features through to the APIs, data models and systems behind them
• Build the controls and audit trails customers use to define, enforce and understand how people, services and agents act within their systems
• Design shared auth APIs and primitives, then work closely with Product, Design, Security, and other Render teams to drive adoption
• Operate authentication and authorization systems that customers and other teams depend on, including observability, safe rollouts, incident response, and on-call

Requirements:

• 6+ years of experience shipping and operating production systems
• You've built customer-facing authentication or authorization features and understand how security choices shape the product experience
• You've designed and operated systems where correctness, availability, and safe rollout matter. You are comfortable working through API, data-model, caching, and migration tradeoffs
• You can balance security and product tradeoffs. You understand why a control exists, the friction it creates and when a simpler design is enough
• A track record of taking ambiguous projects from design through production while working with product, design, and engineers in other parts of the company
• Hands-on experience with OAuth, OpenID Connect, SAML, SCIM, JWTs or other authentication methods
• Experience with multi-tenant authorization models such as RBAC, ABAC, or ReBAC, including policy engines or fine-grained authorization systems
• Experience with workload identity, short-lived credentials, secrets management, privileged access, or security controls for services and agents
• Experience building developer platforms, cloud infrastructure, identity product or SaaS products where APIs and backwards compatibility matter
• Familiarity with compliance frameworks such as SOC 2 or ISO 27001 and an ability to turn those requirements into security improvements for all customers
• Contributions to open-source auth/security tooling