[Hiring] Staff Software Engineer @Basis

Role Description

You will be specializing in technical development of our authentication and authorization platform. Other ways you will contribute:

• Define authorization for our AI-powered agentic workflows and design how non-human actors authenticate, receive scoped permissions, and operate within the same authorization framework as human users.
• Evolve our identity layer in Auth0 to improve authentication, token issuance, and identity federation.
• Mature and maintain our Relationship-Based Access Control (ReBAC) OpenFGA model, which supports all authorization decisions across our infrastructure.
• Drive large-scale technical projects that depend on multiple teams and systems. Establish and champion best practices and quality standards with the team.
• Set a positive example and mentor others on how to collaborate in pull requests, demos, and working relationships. Contribute to a culture of learning and high standards of technical achievement.
• Take ownership over team deliverables, decisions, quality, process, and technical direction. Be accountable for driving projects from ideation through production.
• Demonstrate a deep understanding of our application’s business domain and stakeholder needs. Use your knowledge to proactively identify risks and blockers during planning discussions, architecture discussions, and RFCs. Ensure feasibility and alignment between business goals and technical implementation for large-scale projects.
• Embody Basis’ core principles while fostering a positive culture within the team. Actively promote Basis in the community.

Qualifications

• Minimum of 8 years of professional software experience, with significant depth in identity, authentication, or authorization systems.
• Deep understanding of OAuth 2.0 and OpenID Connect (token flows, JWKS validation, scopes, audience restrictions, etc).
• Hands-on experience with ReBAC systems (OpenFGA, Zanzibar, SpiceDB), including modeling authorization schemas, writing and testing tuple-based policies, and reasoning about permission evaluation performance.
• Experience with Auth0 or comparable identity providers (Okta, Azure AD, Keycloak).
• Strong proficiency in backend languages such as Java, Ruby, or Python as well as web frameworks such as Spring Boot, Rails, or Django.
• Fluency with AI coding tools (Claude Code, Cursor, Codex, etc.) as a core part of the development workflow — for code generation, debugging, exploration of unfamiliar codebases, and documentation — paired with strong judgment for evaluating, refining, and taking full ownership of AI-generated output.
• Thoughtful approach to collaboration, design, and decision-making that prioritizes equity, access, and continuous learning.
• Commitment to creating inclusive, respectful environments where all voices are valued and supported.

Requirements

• Ruby, JavaScript, Java
• AWS, Docker, Kubernetes
• PostgreSQL, Redis
• Rails, Node.js, React, RabbitMQ, Sidekiq

Benefits

• Flexible work week
• 401k/RRSP matching
• Mental health support
• Paid sabbaticals
• Generous parental leave
• Flexible work options