Who can apply: US-based role. The employer has not said which states are eligible — confirm before applying.
Location as listed by the employer: “Remote (US)”
Apply on OpenRouter's site ↗
Opens the employer's official application page.
Generate a CV for this job
Generate my CV
A CV tailored to this job's requirements in one click — boosted with testimonials from people who know your work.
About this role
OpenRouter is hiring for a Software Engineer, Identity Platform role (full-time). See the official posting for full details.
Requirements
- 5+ years building production identity, authentication or authorization systems at a SaaS, developer-platform or security company.
- Deep fluency in identity standards: OAuth 2.x (PKCE, token exchange, dynamic client registration), OIDC, SAML, SCIM and JWTs, and the ways they break in practice.
- Experience designing authorization models (RBAC, ABAC or ReBAC) for multi-tenant B2B products, including migrating a live system from ad-hoc checks to a unified model.
- Hands-on experience integrating enterprise identity providers (Okta, Entra ID, Google Workspace) and an auth platform (Clerk, Auth0, WorkOS or similar).
- Strong TypeScript and SQL. Comfortable with Postgres and building low-latency, cache-heavy services on a critical request path.
- A security mindset. You think in threat models, design for least privilege and can explain your decisions to an enterprise security reviewer.
- You work well across teams. You'll partner daily with Trust & Safety, Money, Product, Sales and CS, and turn messy enterprise asks into clean systems.
- High agency and AI-forward. You use coding agents daily and like automating away manual security and onboarding work.
Summarized from the employer's posting — check the full posting for every requirement.
New remote jobs for your state, by email.
A short digest only when there's something new. Confirm by email, unsubscribe anytime.