---
title: 'Staff Software Engineer, Identity & Authorization at Replit'
canonical: 'https://feeny.ai/job/staff-software-engineer-identity-authorization-replit-foster-city-jp6j3bfn9023'
type: 'job'
last_seen: '2026-09-15'
---

# Staff Software Engineer, Identity & Authorization at Replit

- **Company:** [Replit](https://feeny.ai/companies/replit)
- **Location:** Foster City, CA
- **Employment:** full-time
- **Work type:** hybrid
- **Posted:** 2026-09-11
- **Last confirmed live:** 2026-09-15
- **Apply:** https://jobs.ashbyhq.com/replit/790afe73-238a-489c-875e-ac4e15780112

## Job description

Replit is the agentic software creation platform that enables anyone to build applications using natural language. With millions of users worldwide, Replit is democratizing software development by removing traditional barriers to application creation.

## About the Team

Product Platform builds and owns the shared foundations the rest of Replit is built on, spanning the full stack so every other team can ship features safely and quickly. Identity & Authorization defines how people, agents, sandboxes, and services prove who they are and what they can do. These systems protect critical product and service interactions across Replit's web product, Agent, enterprise controls, and internal services. Our work is high-leverage and horizontal: when identity and policy are clear, reliable, and easy to adopt, every other team can move faster without rebuilding security controls. We are a small, collaborative team that values curiosity and clear thinking over pedigree, and we work in the open by bringing each other the problem rather than just the request. We care more about how you reason and build than the route you took to get here.

## About the Role

As a Software Engineer, you will design, build, and operate the identity and authorization systems that protect critical interactions on Replit, including Agent acting on behalf of a user or holding their own identity. The work is guided by a few simple questions:

- Can every protected request prove which workload made it, which principal it represents, and who is acting on that principal's behalf?
- Can product teams express policy once and trust the same decision across web, mobile, Agent, and internal services?
- Can enterprise administrators control who can access each workspace, app, connector, and Agent capability without navigating a permission maze as well as having a legible ledger of decisions?
- Can Agent act for a user across long-running and durable work without receiving broad or long-lived credentials?
- Are identity and authorization fast, reliable, highly available, and observable enough for the product flows that depend on them?

## What you'll do

- Design and operate central authorization interfaces with typed principals, actions, resources, decisions, explainable deny reasons, privilege attenuation, delegations, and obligations
- Evolve enterprise roles, groups, app access, entitlements, and workspace policy so common cases stay simple and advanced cases remain possible
- Build and operate Replit's Security Token Service and workload identity using OAuth 2.0 token exchange, JWT/OIDC, SPIFFE/SPIRE, and mTLS
- Threat-model delegation, confused-deputy risks, and cross-tenant movement, then make secure, fail-closed behavior the default
- Lead compatible migrations with shadow evaluation, feature gates, telemetry, and rollback plans, and own the SLOs, incidents, and operational health of the systems you ship
- Partner with Agent, Connectors, Enterprise, Security, and Infrastructure teams to turn product requirements into shared platform primitives
- Research and develop new innovative approaches to Authx in the Agentic world

Areas you might work in

- Authorization policy: evolve Replit's central policy decision point and migrate fragmented authorization checks to its typed contract.
- Agent delegation: extend the current delegation foundation so the user is the subject and Agent is the authenticated actor, with continuous validation and dynamic permission envelopes as work runs.
- Enterprise access control: evolve roles, groups, workspace policy, and app-level grants for both simple collaboration and complex organizations.
- Agent and service identity and reliability: operate the token and workload-identity systems that protect service-to-service traffic.

Required skills and experience

- Experience shipping and operating security-sensitive backend or distributed systems in production, including reliability, performance, incidents, and observability
- Depth in authentication, authorization, or identity systems, such as OAuth 2.0/OIDC, JWT, mTLS, Identity Federation, RBAC, ReBAC, PBAC, Zanzibar, Macaroons, Biscuits, Cedar, or policy engines. You do not need prior experience with every item
- Strong understanding of multi-tenant security, least privilege, delegation, privilege attenuation, auditability, and threat modeling
- Experience migrating security-sensitive systems without breaking callers. Approaches can include typed contracts, shadow evaluation, and staged enforcement
- Fluent in at least one production backend stack. Our systems use TypeScript, Go, Rust, Postgres, gRPC/Protobuf, Kubernetes, Envoy, and Restate
- Able to make and communicate tradeoffs across security, reliability, latency, product experience, delivery speed, and long-term maintainability

If you're excited about this role but don't meet every requirement, we still encourage you to apply.

Full-Time Employee Benefits Include: 💰 Competitive Salary & Equity 💹 401(k) Program with a 4% match (US Only) ⚕️ Health, Dental, Vision and Life Insurance 🩼 Short Term and Long Term Disability 🚼 Paid Parental, Medical, Caregiver Leave 🏝 Flexible Time Off (FTO) + Holidays 🚗 Commuter Benefits (In-Office & US Only) 📱 Monthly Wellness Stipend 🧑‍💻 Autonomous Work Environment 🖥 In Office Set-Up Reimbursement (In-Office Only) 🚀 Quarterly Team Gatherings ☕ In Office Amenities (In-Office Only)

Want to learn more about what we are up to?

- [Self-driving Company](https://replit.com/blog/self-driving-company)
- [Replit Agent at Scale](https://replit.com/blog/evaluating-and-improving-agent-at-scale)
- [AI Adoption](https://replit.com/blog/ai-adoption)
- [Build Open-Source Apps](https://replit.com/build/open-source-app-builder)

Interviewing + Culture at Replit

- [Operating Principles](https://blog.replit.com/operating-principles)
- [Reasons not to work at Replit](https://blog.replit.com/reasons-not-to-join-replit)

To achieve our mission of making programming more accessible around the world, we need our team to be representative of the world. We welcome your unique perspective and experiences in shaping this product. We encourage people from all kinds of backgrounds to apply, including and especially candidates from underrepresented and non-traditional backgrounds.

## About Replit

## Company Overview
- **One-liner**: Replit is an agentic creation platform that enables anyone to turn ideas into real, working software using AI-powered tools, a collaborative browser-based IDE, and full-stack infrastructure.
- **Entity Type**: Private (Series D)
- **Headquarters**: Foster City, California, United States
- **Founded**: 2016
- **Founders**: Amjad Masad, Haya Odeh, Faris Masad

## Core Business
- Primary industry/industries: Developer Tools, AI-Powered Software Development, Cloud-Based IDE
- Target customers: Individual developers, learners, non-programmers, enterprise teams (B2B, B2C)
- Mission or purpose statement: To empower one billion creators by making software creation more accessible, immediate, and real, regardless of technical background.

## Products & Services
- **Replit Agent (Agent 4)**: An AI agent that writes production-ready code, evolves it, and handles the coordination and execution of building apps. Users describe and publish projects using natural language.
- **Collaborative IDE**: A browser-based, full-stack integrated development environment that allows real-time coding and collaboration, with no local setup required.
- **Replit Platform (Core)**: A full-stack cloud solution including built-in services for Authentication, Database, Hosting, and Monitoring, enabling scalable app development from day one.
- **Integrations**: Connects to 100+ services and APIs, including OpenAI, Stripe, and Google Workspace.
- **Enterprise Controls**: Features include SSO/SAML, SOC 2 compliance, admin controls, and secure screening services.

## Market Standing
- **Valuation/Market Cap**: Not publicly disclosed (Series D)
- **Key Metric**: Total Funding of $872M raised (as of latest Series D); over 50 million users on the platform.
- **Notable Investors/Partners**: Not detailed in search results, but the company is well-funded at the Series D stage with a strong investor base.
- **Growth Signals**: Over 50 million creators on the platform; rapid adoption of AI Agent capabilities; expansion into enterprise with Forward Deployed Engineering; active hiring across 28+ open roles as of mid-2026.

## Competitive Advantages
- **Agentic Creation**: The "Agent 4" feature allows non-programmers to build and ship software through natural language, radically lowering the barrier to entry.
- **All-in-One Platform**: Combines IDE, AI, hosting, database, authentication, and monitoring in a single, browser-based environment, eliminating setup friction.
- **Full-Stack Infrastructure**: Offers scalable services (Auth, DB, Hosting) that work out of the box, enabling rapid prototyping and deployment without DevOps overhead.
- **Massive User Base**: 50M+ creators provide a strong network effect and a rich ecosystem for learning and sharing.

## Strategic Focus
- **Democratizing Software Creation**: Focus on making software creation as intuitive as using a smartphone, targeting the "next billion creators" beyond traditional developers.
- **AI-Native Development**: Prioritizing AI agents (Agent 4) that handle complex coding and coordination, allowing humans to focus on ideas and planning.
- **Enterprise Adoption**: Building enterprise-grade security (SOC 2, SSO) and dedicated Forward Deployed Engineering teams to capture business customers.
- **Platform Ecosystem**: Expanding integrations and third-party services to make the platform a central hub for all software creation needs.

## Why Work Here
- **Culture**: Described as a place for "builders who care about craft, speed, and making things that matter." The company values "ideas first. Proof matters. Momentum wins."
- **Work Style**: "In person, on purpose." Replit emphasizes working from its HQ in Foster City, believing that proximity accelerates decisions and improves work quality. It operates a hybrid model with a strong in-office expectation.
- **Compensation & Benefits**:
    - Competitive salary, equity, and performance bonus
    - Health, dental, and vision insurance with HSA contributions ($2k individual / $4k family)
    - 24 weeks paid birth-parent leave; 12 weeks paid bonding and family care leave
    - 401K with company matching
    - $1,000 annual learning & development reimbursement
    - Monthly wellness stipend, commuter benefits, and in-office meals (breakfast, lunch, dinner)
    - Flexible time off and paid sick leave
- **Engineering Culture**: Strong emphasis on building resilient, scalable systems (Kubernetes, GCP). Roles like Staff Infrastructure Engineer and GRC Engineer indicate a mature, security-conscious engineering environment.

## Sources
1. [replit.com/careers](https://replit.com/careers)
2. [replit.com/about](https://replit.com/about)
3. [replit.com](https://replit.com/)
4. [tryjeremy.com/companies/replit](https://tryjeremy.com/companies/replit)
5. [jobs.ashbyhq.com/replit](https://jobs.ashbyhq.com/replit)

## Other roles at Replit

- [Product Partnerships Manager, Consumer/SMB](https://feeny.ai/job/product-partnerships-manager-consumer-smb-replit-foster-city-smv0av0s0hzs) — Foster City, CA
- [Software Engineer - New Grad (2027)](https://feeny.ai/job/software-engineer-new-grad-2027-replit-foster-city-q8qmkd41a3z9) — Foster City, CA
- [Premium Support Engineer (NYC, Weekend Shift)](https://feeny.ai/job/premium-support-engineer-nyc-weekend-shift-replit-new-york-6se924vh0dtm) — New York, NY
- [Premium Support Engineer (Foster City, Weekend Shift)](https://feeny.ai/job/premium-support-engineer-foster-city-weekend-shift-replit-foster-city-cw5wv60247xn) — Foster City, CA
- [Premium Support Engineer (London, Weekend)](https://feeny.ai/job/premium-support-engineer-london-weekend-replit-london-frz3yb1k553a) — London, United Kingdom
- [Premium Support Engineer (Singapore, Weekend)](https://feeny.ai/job/premium-support-engineer-singapore-weekend-replit-singapore-565rbb7t8ant) — Singapore
- [Sr. Learning Experience Lead, Onboarding & Enablement](https://feeny.ai/job/sr-learning-experience-lead-onboarding-enablement-replit-foster-city-p8j5qdyt11jh) — Foster City, CA
- [Senior Software Engineer, Growth Enablement](https://feeny.ai/job/senior-software-engineer-growth-enablement-replit-foster-city-k2bwb9jx2zkc) — Foster City, CA
- [Cohort 0](https://feeny.ai/job/cohort-0-replit-foster-city-9qgx2vpykne6) — Foster City, CA
- [Learning Experiences Creator](https://feeny.ai/job/learning-experiences-creator-replit-foster-city-j76ttn67ggbm) — Foster City, CA