Senior Software Engineer - Identity - Remote

2w2 weeks ago

Sanity.io

Remote · Full-time · €90,000 – €150,000

About this role

Sanity.io is building the future of AI-powered Content Operations, giving teams freedom to model, create, and automate content. Join the Identity team as a Senior Software Engineer, owning authentication and authorization infrastructure that secures every request across the platform. Companies like SKIMS, Figma, Riot Games, Anthropic, and Nordstrom use Sanity to power their operations.

Work on distributed systems at scale, handling OAuth 2.0, OIDC, SAML/SSO, session management, and JWT flows for hundreds of thousands of developers. Security is a first-class design constraint in everything built. Identify architectural improvements and drive them from design through production with a security-first lens.

Build the identity layer for AI and agentic workflows, designing agent attribution for verifiable identity at platform scale. Collaborate with platform and product teams to define authorization models for agentic contexts. Establish trust in API calls not originating from humans.

Work end-to-end across backend services in Node.js/TypeScript, PostgreSQL, and frontend auth flows. Participate in code reviews, architectural discussions, incident response, and on-call for identity services. Partner closely with security, platform, and product teams on cross-cutting concerns.

Requirements

Strong hands-on experience with TypeScript/Node.js and PostgreSQL in production backend systems
Deep knowledge of identity and authentication standards: OAuth 2.0, OIDC, SAML, JWT, and session management
Proven experience designing and operating distributed systems at scale
Security-first mindset - reason about threat models, trust boundaries, and least-privilege by default
Self-directed and autonomous; comfortable owning problems end-to-end
Experience with Go, Lua
Comfortable collaborating effectively across a remote, distributed team

Responsibilities

Design and build core authentication and authorization infrastructure
Implement and evolve identity protocols including OAuth 2.0, OIDC, SAML/SSO, session management, and JWT
Own reliability, correctness, and security posture of identity services across the distributed platform
Identify architectural improvements and drive them from initial design through production
Design and implement agent attribution for AI agents acting on behalf of users and organizations
Collaborate with platform and product teams to define identity primitives and authorization models
Work end-to-end across Node.js/TypeScript backend, PostgreSQL, and frontend auth flows
Participate in code reviews, architectural discussions, incident response, and on-call