Staff Software Engineer, Replit
Identity & Authorization
$250-375k
+ Offers Equity
3+ days a week in office (Foster City, CA)
Collaborative coding platform
Be an early applicant
Collaborative coding platform
201-500 employees
Be an early applicant
$250-375k
+ Offers Equity
3+ days a week in office (Foster City, CA)
201-500 employees
Company mission
To build powerful, simple tools and platforms for learners, educators, and developers.
Role
Who you are
- Experience shipping and operating security-sensitive backend or distributed systems in production, including reliability, performance, incidents, and observability
- Depth in authentication, authorization, or identity systems, such as OAuth 2.0/OIDC, JWT, mTLS, Identity Federation, RBAC, ReBAC, PBAC, Zanzibar, Macaroons, Biscuits, Cedar, or policy engines. You do not need prior experience with every item
- Strong understanding of multi-tenant security, least privilege, delegation, privilege attenuation, auditability, and threat modeling
- Experience migrating security-sensitive systems without breaking callers. Approaches can include typed contracts, shadow evaluation, and staged enforcement
- Fluent in at least one production backend stack. Our systems use TypeScript, Go, Rust, Postgres, gRPC/Protobuf, Kubernetes, Envoy, and Restate
- Able to make and communicate tradeoffs across security, reliability, latency, product experience, delivery speed, and long-term maintainability
What the job involves
- Product Platform builds and owns the shared foundations the rest of Replit is built on, spanning the full stack so every other team can ship features safely and quickly
- Identity & Authorization defines how people, agents, sandboxes, and services prove who they are and what they can do. These systems protect critical product and service interactions across Replit's web product, Agent, enterprise controls, and internal services
- Our work is high-leverage and horizontal: when identity and policy are clear, reliable, and easy to adopt, every other team can move faster without rebuilding security controls
- We are a small, collaborative team that values curiosity and clear thinking over pedigree, and we work in the open by bringing each other the problem rather than just the request. We care more about how you reason and build than the route you took to get here
- As a Software Engineer, you will design, build, and operate the identity and authorization systems that protect critical interactions on Replit, including Agent acting on behalf of a user or holding their own identity
- The work is guided by a few simple questions:
- Can every protected request prove which workload made it, which principal it represents, and who is acting on that principal's behalf?
- Can product teams express policy once and trust the same decision across web, mobile, Agent, and internal services?
- Can enterprise administrators control who can access each workspace, app, connector, and Agent capability without navigating a permission maze as well as having a legible ledger of decisions?
- Can Agent act for a user across long-running and durable work without receiving broad or long-lived credentials?
- Are identity and authorization fast, reliable, highly available, and observable enough for the product flows that depend on them?
- Design and operate central authorization interfaces with typed principals, actions, resources, decisions, explainable deny reasons, privilege attenuation, delegations, and obligations
- Evolve enterprise roles, groups, app access, entitlements, and workspace policy so common cases stay simple and advanced cases remain possible
- Build and operate Replit's Security Token Service and workload identity using OAuth 2.0 token exchange, JWT/OIDC, SPIFFE/SPIRE, and mTLS
- Threat-model delegation, confused-deputy risks, and cross-tenant movement, then make secure, fail-closed behavior the default
- Lead compatible migrations with shadow evaluation, feature gates, telemetry, and rollback plans, and own the SLOs, incidents, and operational health of the systems you ship
- Partner with Agent, Connectors, Enterprise, Security, and Infrastructure teams to turn product requirements into shared platform primitives
- Research and develop new innovative approaches to Authx in the Agentic world
- Areas you might work in
- Authorization policy: evolve Replit's central policy decision point and migrate fragmented authorization checks to its typed contract
- Agent delegation: extend the current delegation foundation so the user is the subject and Agent is the authenticated actor, with continuous validation and dynamic permission envelopes as work runs
- Enterprise access control: evolve roles, groups, workspace policy, and app-level grants for both simple collaboration and complex organizations
- Agent and service identity and reliability: operate the token and workload-identity systems that protect service-to-service traffic
Our take
Young students and workers in the tech industry are constantly being encouraged to add programming to their skill-set portfolio to prepare for a digital future. However, getting started with programming environments can be very difficult, requiring computer science knowledge to even boot the programming environment in the first place.
Replit embeds pre-booted programming environments within web browsers, allowing users to begin coding immediately without having to set up the client. The website supports most popular programming languages such as C++, Javascript, and PHP, in addition to frameworks such as Django and Sinatra. The service can be accessed for free and provides access to everything required to program applications including libraries, tutorials, and collaborative capabilities.
The company has attracted millions of users, including some at major tech companies like Google, Facebook, and Stripe. In 2025, it raised $250 million in funding, raising the company's value to $3 billion. It will use this funding to expand its reach and operations and accelerate its product development.
Kirsty
Company Specialist at Welcome to the Jungle
Insights
37% employee growth in 12 months
Company
Funding (last 2 of 9 rounds)
Jan 2026
$400m
SERIES D
Jul 2025
$250m
LATE VC
Total funding: $872.2m
Company benefits
- Remote-First and Autonomous Working Environment
- Flexible Work Hours
- Equity
- Home Office Set-Up Stipend
- Health, Dental, Vision, and Life Insurance
- Short Term and Long Term Disability
- Monthly Expenses Stipend
- Commuter Benefits
- Parental and Baby Bonding Leave
- Flexible PTO (2 Weeks Minimum Required) + Holidays
- 401k Program
- Annual Company/Team Offsites (4/year)
Company HQ
Town Center, Foster City, CA
Leadership
Amjad Masad
(Co-Founder & Head of Engineering)They started their career as a Developer at Arcadia, before brief software roles at Boss Consulting, wikikiwis, Untitled Labs, and Yahoo! They were a Founding Engineer at Codecademy and spent over 2 years at Facebook.
Haya Odeh
(Co-Founder)Having worked as a Web Designer for LANA-W.S.I, Boss Consulting, Bdesign, and General Assembl.y, they worked for a year as a Freelance Graphic Designer. In 2015, they co-founded Replit.
Salary benchmarks
We don't have enough data yet to provide salary benchmarks for this role.
Submit your salary to help other candidates with crowdsourced salary estimates.
Share this job
View 60 more jobs at Replit