At Keycard, we're building identity and access infrastructure for the agent-native era, where software isn't static but a agile, constantly changing system of AI agents working on behalf of people and businesses. Keycard gives every agent a verified identity and issues short-lived, task-scoped credentials at runtime, so agents can only do what they were asked to do, and every action is fully auditable. We're backed by a16z, Boldstart, and Acrew, and our founding team built and scaled Snyk, Auth0, HashiCorp, and Heroku.

We're hiring a staff-level Software Engineer, SDK to own the libraries developers use to put Keycard in front of their agents and MCP servers. Keycard is a control plane for agents: identity, credential exchange, delegation, policy, and audit. The REST API clients for Python, TypeScript, and Go are generated from our OpenAPI spec. Python is the most complete today. TypeScript is in preview and working toward parity, and Go and Ruby are earlier. Keeping behavior consistent across four languages, while priorities differ and TypeScript comes next, is the core of the job. You'll work with founders, product, and the engineers building the services underneath.

Keep authorization concepts and behavior consistent across languages while making each API idiomatic. Map credential types and error semantics across Python, TypeScript, Go, and Ruby.

- Our MCP package follows the upstream MCP SDK's major versions, and framework integrations are tested nightly against each upstream's latest release. Ship support for new versions quickly, and decide when an old line moves to security fixes only.
- Coding agents already open a good share of our SDK pull requests. Decide what they're trusted to do, and keep tests and review strong enough to catch what they get wrong.





You've shipped libraries or SDKs that other developers depend on, and supported them through breaking changes.

- You've kept one API consistent across at least two languages. You write idiomatic Python and TypeScript; Go or Ruby is a plus.
- Code generation for multi-language SDKs: Stainless, Speakeasy, Fern, OpenAPI, or protobuf.
- Close the biggest gaps between the TypeScript and Python SDKs, toward dropping TypeScript's preview label.
- Publish a cross-language API guide: names, errors, and credential types, mapped across Python, TypeScript, Go, and Ruby.
- Take one upstream breaking change, like a new MCP SDK major or framework release, from nightly failure to released support.
- You use coding agents every day, and you know which of their changes need a closer look.

Build at the Frontier: Work every day at the frontier of agent-native systems — shipping, inventing, and iterating on technology that hasn’t been built before. You’ll help shape an organization that embeds AI into its foundation as an enduring competitive advantage.

- Compensation With Upside: Market-competitive salaries and generous equity packages (4-year vest, 1-year cliff) give you the security to focus on building — and the asymmetric upside of ownership in a company chasing a category-defining mission.
- Comprehensive Benefits & Recharge: Health, dental, vision, and paramedical coverage for you and your family, plus 4 weeks vacation, 11 statutory holidays, and 1 volunteer day annually. A new MacBook Pro, a $500 stipend for peripherals, and the best AI tools available so you can work at the forefront of agent-native workflows.
- Remote-First Flexibility: We are a remote-first team prioritizing asynchronous collaboration, with hiring focused in North and South America.

📌 Software Developers, Remote (Canada)
🏢 Keycard Labs
📍 Canada