--- title: 'Software Engineer, Identity Platform at OpenRouter' canonical: 'https://feeny.ai/job/software-engineer-identity-platform-openrouter-united-states-hpdb136h7c3s' type: 'job' last_seen: '2026-10-24' --- # Software Engineer, Identity Platform at OpenRouter - **Company:** OpenRouter - **Location:** United States - **Employment:** full-time - **Work type:** remote - **Posted:** 2026-10-20 - **Last confirmed live:** 2026-10-24 - **Apply:** https://jobs.ashbyhq.com/openrouter/8930eaba-071f-4b08-b598-306cb691b0d4 ## Job description ## About OpenRouter OpenRouter is the leading AI routing and infrastructure layer that enterprises use to access, manage, and optimize the best large language models across providers—without lock-in, capacity constraints, or unnecessary cost. We power the most advanced AI teams in the world by giving them the flexibility to move fast, scale confidently, and stay future-proof as models evolve. As enterprise adoption of AI accelerates, OpenRouter sits at the center of how organizations operationalize LLMs across research, product, and production workloads. ## About the Role Every request that flows through OpenRouter starts with a question: who is this, and what are they allowed to do? Millions of developers, thousands of organizations and a growing fleet of autonomous agents reach us through API keys, browser sessions, OAuth apps, MCP clients and federated cloud workloads. The credential formats differ, but every one of them has to resolve to the same trustworthy answer. We're hiring our first Software Engineer, Identity Platform to envision, build and own identity across OpenRouter's inference gateway, marketplace and rapidly growing suite of agentic products. You will define how people, organizations, workspaces, apps and agents authenticate, what they can access, and how that access is delegated, governed and revoked, from a solo developer's first sign-in to a Fortune 500 rollout provisioned straight from their identity provider. If you love the intersection of security, systems design and product, this is your chance to build the trust layer that takes OpenRouter into the enterprise. ## What You’ll Do - Unify authentication. API keys, management keys, browser sessions, OAuth and OIDC tokens and MCP logins all resolve to a single principal with one authorization model. Own sign-in, MFA, passkeys and enterprise SSO (SAML and OIDC) on top of it, plus the full lifecycle of every credential we issue: scoped, expiring, rotatable and revocable. - Build delegated access for apps and agents. Sign in with OpenRouter, OAuth for MCP clients with dynamic client registration, and consent grants that can be revoked without touching the underlying key. Apps and agents act on a user's behalf without ever handling a secret, and admins can pin that consent to an org or workspace across a managed fleet. - Go secretless with workload identity. CI pipelines and cloud workloads exchange their own identity provider tokens for short-lived OpenRouter credentials under org-defined federation policies, and internal services authenticate to each other the same way. No static secrets to leak or rotate. - Build composable authorization. A single permission model where every route asks "can this caller do this, here?" instead of checking role names. Org and workspace roles, viewer and restricted roles, read-only automation keys and, over time, custom roles. Deny by default, enforced on the server and reflected cleanly in the UI. - Make enterprise provisioning just work. SCIM user and group provisioning, group-to-role mapping, domain verification and self-serve SSO that works first try with Okta, Entra ID, Google Workspace and the long tail of identity providers. Partner platforms can provision accounts and keys for their own customers programmatically. An IT admin should be able to onboard thousands of seats without filing a ticket. - Define the core identity model. Users, organizations, workspaces, memberships, apps and guardrails, and how they compose. Clean boundaries, clear ownership semantics and a data model that supports the next five years of enterprise features without a rewrite. - Protect users and their data. Identity fraud detection, KYC and verification flows, step-up checks on sensitive actions, account-takeover defenses and abuse signals that stop bad actors without adding friction for good ones. Least-privilege access to customer data across every OpenRouter surface. - Treat auditability and correctness as features. The system ensures every credential has a provenance, every access decision is explainable and every privileged change lands in an audit log. Auth stays fast and highly available on the hot path of every inference request, with clear, standards-based failure modes developers can debug on their own. An access grant nobody can explain is a bug. - Work cross-functionally. Partner closely with the Trust & Safety team on fraud and abuse, with the Money team on payment-linked verification and risk, with Product on dashboard and onboarding experiences, and with Sales and CS on enterprise security reviews and SSO rollouts. ## What We’re Looking For - 5+ years building production identity, authentication or authorization systems at a SaaS, developer-platform or security company. - Deep fluency in identity standards: OAuth 2.x (PKCE, token exchange, dynamic client registration), OIDC, SAML, SCIM and JWTs, and the ways they break in practice. - Experience designing authorization models (RBAC, ABAC or ReBAC) for multi-tenant B2B products, including migrating a live system from ad-hoc checks to a unified model. - Hands-on experience integrating enterprise identity providers (Okta, Entra ID, Google Workspace) and an auth platform (Clerk, Auth0, WorkOS or similar). - Strong TypeScript and SQL. Comfortable with Postgres and building low-latency, cache-heavy services on a critical request path. - A security mindset. You think in threat models, design for least privilege and can explain your decisions to an enterprise security reviewer. - You work well across teams. You'll partner daily with Trust & Safety, Money, Product, Sales and CS, and turn messy enterprise asks into clean systems. - High agency and AI-forward. You use coding agents daily and like automating away manual security and onboarding work. Nice to Haves - You've shipped enterprise SSO and SCIM that passed real customer security reviews. - You've built workload identity federation or secretless auth for CI and cloud workloads. - You've built OAuth, consent and delegation for AI agents or MCP clients acting on behalf of users. - Experience with identity verification, KYC or fraud and risk systems (e.g. Stripe Identity, Persona, Sift). - Experience with policy engines or fine-grained authorization (e.g. OpenFGA, Cedar, OPA, Zanzibar-style systems). - You've helped a company achieve SOC 2, ISO 27001 or similar compliance. - You're an existing OpenRouter user, or have built projects in AI tooling. If you don’t think you meet all of the criteria below but still are interested in the job, please apply. Nobody checks every box, and we’re looking for someone who is excited to join the team. ## About OpenRouter ## Company Overview - **One-liner**: OpenRouter provides a unified API that gives developers access to 400+ large language models from 70+ providers through a single interface. - **Entity Type**: Private (Series B) - **Headquarters**: New York, New York, United States - **Founded**: 2023 - **Founders**: Alex Atallah (CEO, Co-Founder), Louis Vichy (Co-Founder) ## Core Business - **Primary industry**: AI Infrastructure / Developer Tools - **Target customers**: B2B — software developers, AI application builders, and enterprises building agentic and LLM-powered products. - **Mission or purpose**: To be the unified interface for LLMs, helping developers build AI applications without worrying about provider lock-in, downtime, or complex integrations. ## Products & Services - **Unified LLM API**: A single, OpenAI-compatible API endpoint that provides access to 400+ models from 70+ providers (OpenAI, Anthropic, Google, Meta, Mistral, etc.). Handles authentication, request routing, rate limiting, and automatic failover. Developers avoid managing separate API keys and billing relationships. - **Enterprise Offering**: Custom data policies, fine-grained provider controls, and dedicated support for organizations that need data governance and compliance. - **Model & App Rankings**: A public leaderboard and community hub for discovering top-performing models and AI applications built on the platform. ## Market Standing - **Valuation**: Not publicly disclosed. - **Key Metric**: Total funding of **$200M** across multiple rounds (Seed, Series A, Series B). - **Latest Funding**: $120M venture round in April 2026. - **Notable Investors**: Andreessen Horowitz, Menlo Ventures, Snowflake Ventures, ServiceNow Ventures, League of Generalists. - **Growth Signals**: Processes **100 trillion tokens monthly**; serves **250k+ apps** and **4.2M+ global users**; headcount grew **+611% year-over-year** to 46 employees; LinkedIn followers grew **+871.9% year-over-year** to 14,754. ## Competitive Advantages - **Provider Agnosticism**: Developers are not locked into a single provider; OpenRouter handles failover and routing across 70+ providers, ensuring high availability and resilience. - **Cost Optimization**: Offers better prices than going direct to many providers, with no subscription fees — users simply buy credits. - **Massive Model Selection**: 400+ models in one API, from frontier reasoning models to lightweight, cost-optimized options, enabling dynamic model selection per task. - **OpenAI-Compatible SDK**: Drop-in replacement for existing OpenAI integrations, minimizing migration friction. ## Strategic Focus - **Scaling Infrastructure**: Building distributed inference infrastructure to improve reliability and reduce latency for global users. - **Enterprise Adoption**: Growing enterprise sales team and launching dedicated enterprise features (data policies, compliance controls). - **Agentic Development**: Supporting the next wave of autonomous AI agents with robust routing, fallback, and observability. - **Platform Expansion**: Growing the ecosystem of featured agents and apps built on OpenRouter. ## Why Work Here - **Remote First**: Flexibility to work from anywhere in the US. - **Small, High-Impact Team**: ~46 employees with a flat structure where every person has direct impact on the product and users. - **Competitive Compensation**: Top-of-market salary and equity packages. - **Health & Wellness**: Fully covered health, dental, and vision plans for you and your dependents. - **WFH Budget**: Annual stipend for home office setup and internet. - **Unlimited PTO**: Encouraged time off to recharge. - **Quarterly Offsites**: Regular team gatherings to connect in person. - **Engineering Culture**: High ownership, small team punching above its weight, building critical AI infrastructure at massive scale (100T tokens/month). ## Strategic Focus - **Scaling Infrastructure**: Building distributed inference routing to improve reliability and reduce latency globally. - **Enterprise Growth**: Expanding enterprise sales, security, and compliance features to serve larger organizations. - **Agentic Ecosystem**: Supporting the next wave of autonomous AI agents with robust routing, fallback, and observability. - **Platform Expansion**: Growing the marketplace of featured agents and apps, and deepening integrations with developer tools. ## Competitive Advantages - **Provider Agnosticism**: Developers are not locked into a single provider; OpenRouter handles failover and routing across 70+ providers, ensuring high availability. - **Cost Optimization**: Offers better prices than going direct to many providers, with no subscription fees — users simply buy credits. - **Massive Model Selection**: 400+ models in one API, from frontier reasoning models to lightweight, cost-optimized options. - **OpenAI-Compatible SDK**: Drop-in replacement for existing OpenAI integrations, minimizing migration friction. ## Why Work Here - **Remote First**: Flexibility to work from anywhere in the US. - **High Impact, Small Team**: ~46 employees, each with direct impact on the product and millions of users. - **Competitive Compensation**: Top-of-market salary and equity packages. - **Health & Wellness**: Fully covered health, dental, and vision plans for you and your dependents. - **WFH Budget**: Annual stipend for home office setup and internet. - **Unlimited PTO**: Encouraged time off to recharge. - **Quarterly Offsites**: Regular team gatherings to connect in person. - **Engineering Culture**: High ownership, small team punching above its weight, building critical AI infrastructure at massive scale. ## Sources 1. [openrouter.ai](https://openrouter.ai/) 2. [openrouter.ai/careers](https://openrouter.ai/careers) 3. [jobs.ashbyhq.com/openrouter](https://jobs.ashbyhq.com/openrouter/) 4. [cbinsights.com](https://www.cbinsights.com/company/openrouter) 5. [linkedin.com/company/openrouter](https://www.linkedin.com/company/openrouter) ## Other roles at OpenRouter - [Director, Customer Success](https://feeny.ai/job/director-customer-success-openrouter-san-francisco-bay-area-n25qjkq4mvjm) — San Francisco Bay Area, CA - [Director, Customer Support](https://feeny.ai/job/director-customer-support-openrouter-san-francisco-bay-area-n4f5vrxt5j9a) — San Francisco Bay Area, CA - [Software Engineer, Money Platform](https://feeny.ai/job/software-engineer-money-platform-openrouter-united-states-j7dwfxd67nt3) — United States - [Site Reliability Engineer, Provider Operations](https://feeny.ai/job/site-reliability-engineer-provider-operations-openrouter-united-states-j18dk08e73e4) — United States - [Customer Engineer, APAC](https://feeny.ai/job/customer-engineer-apac-openrouter-apac-1mra2rf7fwfw) — APAC - [Business Development Representative, Enterprise](https://feeny.ai/job/business-development-representative-enterprise-openrouter-united-states-r9ksdb1qmwtj) — United States - [IT Manager](https://feeny.ai/job/it-manager-openrouter-new-york-h4f8zd8xr9bm) — New York, NY - [Software Engineer, Ori](https://feeny.ai/job/software-engineer-ori-openrouter-united-states-hhnpazwg5tmq) — United States - [Product Marketing Manager, Enterprise](https://feeny.ai/job/product-marketing-manager-enterprise-openrouter-united-states-2q95fjg7keq8) — United States - [Product Manager, OpenRouter Connect](https://feeny.ai/job/product-manager-openrouter-connect-openrouter-united-states-528m22mvv1h8) — United States