OpenRouter

Software Engineer, Identity Platform

Who can apply: US-based role. The employer has not said which states are eligible — confirm before applying.
Location as listed by the employer: “Remote (US)”
Apply on OpenRouter's site ↗

Opens the employer's official application page.

Generate a CV for this job

A CV tailored to this job's requirements in one click — boosted with testimonials from people who know your work.

Generate my CV

About this role

OpenRouter is hiring for a Software Engineer, Identity Platform role (full-time). See the official posting for full details.

Requirements

  • 5+ years building production identity, authentication or authorization systems at a SaaS, developer-platform or security company.
  • Deep fluency in identity standards: OAuth 2.x (PKCE, token exchange, dynamic client registration), OIDC, SAML, SCIM and JWTs, and the ways they break in practice.
  • Experience designing authorization models (RBAC, ABAC or ReBAC) for multi-tenant B2B products, including migrating a live system from ad-hoc checks to a unified model.
  • Hands-on experience integrating enterprise identity providers (Okta, Entra ID, Google Workspace) and an auth platform (Clerk, Auth0, WorkOS or similar).
  • Strong TypeScript and SQL. Comfortable with Postgres and building low-latency, cache-heavy services on a critical request path.
  • A security mindset. You think in threat models, design for least privilege and can explain your decisions to an enterprise security reviewer.
  • You work well across teams. You'll partner daily with Trust & Safety, Money, Product, Sales and CS, and turn messy enterprise asks into clean systems.
  • High agency and AI-forward. You use coding agents daily and like automating away manual security and onboarding work.

Summarized from the employer's posting — check the full posting for every requirement.