The opportunity
Product Platform builds and owns the shared foundations the rest of Replit is built on, spanning the full stack so every other team can ship features safely and quickly.
What you'll do
Design and operate central authorization interfaces with typed principals,: actions, resources, decisions, explainable deny reasons, privilege attenuation, delegations, and obligations
Evolve enterprise roles, groups, app access, entitlements, and workspace: policy so common cases stay simple and advanced cases remain possible
Build and operate Replit's Security Token Service and workload identity using: OAuth 2.0 token exchange, JWT/OIDC, SPIFFE/SPIRE, and mTLS
Threat-model delegation, confused-deputy risks, and cross-tenant movement,: then make secure, fail-closed behavior the default
Lead compatible migrations with shadow evaluation, feature gates, telemetry,: and rollback plans, and own the SLOs, incidents, and operational health of the systems you ship
Partner with Agent, Connectors, Enterprise, Security, and Infrastructure: teams to turn product requirements into shared platform primitives
What they're looking for
- Research and develop new innovative approaches to Authx in the Agentic world
