Lead identity and authorization projects from problem definition and technical design through implementation, launch, and iteration.

Design authorization and credential models for current and future user, service-account, and agent workflows.

Build fine-grained permissions, workload-based credentials, enterprise identity lifecycle capabilities, and administrative governance controls.

Partner with product, design, and customer-facing teams to translate enterprise security requirements into durable technical solutions.

Establish engineering practices for quality, security, observability, and operational ownership.

Provide technical leadership and mentorship as the team grows.

4–5+ years of experience building production backend systems.

- Hands-on experience designing and implementing product authorization systems, including per-resource or per-object permissions, relationship-based access control, policy engines,



or fine-grained authorization systems in the style of Zanzibar, OpenFGA, SpiceDB, or Cedar.
- Demonstrated end-to-end ownership from initial design through implementation, production rollout, and user-informed iteration.
- Preferred: experience with Python and Go.
- Preferred: production experience running OpenFGA, SpiceDB, or a similar deployment beyond a proof of concept.
- Competitive compensation including meaningful equity.

S. employees, 100% coverage of medical, dental, and vision insurance for employees and dependents.

Flexible PTO including a company-wide Winter Break from Christmas Eve through Recent Year’s Day.

Paid parental leave.

Fertility and family-building stipend through Carrot.

Exposure to a variety of ML startups with learning and networking opportunities.

📌 Software Deployment Specialist (Toronto)
🏢 Baseten
📍 Toronto