Software Engineer, WorkOS
Infrastructure Security
$175-275k
Salary applicable to US applicants. + Equity
APIs to make apps enterprise-ready
Be an early applicant
APIs to make apps enterprise-ready
101-200 employees
Be an early applicant
$175-275k
Salary applicable to US applicants. + Equity
101-200 employees
Company mission
To build a toolkit to help startups meet the requirements for bringing on enterprise clients.
Role
Who you are
- A platform builder. You love building infrastructure that other engineers rely on every day, and you sweat the developer experience details that make adoption effortless
- Fluent in service-to-service auth. You know authentication and authorization deeply: JWTs, X.509 certificates, and when to reach for each
- A systems thinker. You reason carefully about bootstrapping, circular dependencies, availability, and failure modes, especially for infrastructure that everything else depends on
- A pragmatic migrator. You know that shipping the primitive is half the job. You can drive adoption across many teams, meet them where they are, and retire the legacy path
- A strong partner to engineering. You build trust with engineers by understanding their priorities and making security frictionless
- Excited about AI. You're embracing AI and automation to scale platform work and reduce toil
- Curious and humble. You ask the basic questions, enjoy untangling complex systems, and bring others along with you
- 5+ years of experience in software engineering, with a focus on security-related platform, infrastructure, or distributed systems
- Strong working knowledge of secrets management, fine-grained authorization, and workload identity systems
- Familiarity with the Kubernetes ecosystem and authentication/authorization technologies such as JWTs, X.509 certificates, PKI, cert-manager, SPIFFE/SPIRE, and OPA
- Experience building and operating production infrastructure that other teams depend on, with attention to availability and failure modes
- Proven ability to drive cross-team adoption of platform capabilities or lead large-scale migrations
What the job involves
- The Infrastructure Security team provides and supports the primitives that enable engineering to securely build applications and meet compliance obligations, while abstracting away the underlying complexity for the best possible developer experience
- Our work centers on workload identity and authorization: how internal applications authenticate to each other and to the services they depend on, and how that access is granted and enforced
- We're replacing static secrets with short-lived identity credentials, bringing identity-based authentication to the services engineers use every day, and unifying how authorization is managed across the company
- We're a platform engineering team with a security mission
- We measure success by the security outcomes we enable and by how much engineers enjoy building on what we ship — the secure path should be the easiest path
- Build workload identity infrastructure. Make short-lived identity credentials a default part of every application's runtime environment, in partnership with application platform owners
- Bring identity-based authentication to internal services. Work with the owners of major internal dependencies to support identity certificates, make them the golden path for newly onboarding applications, and drive migration of existing ones
- Eliminate static secrets. Replace all static passwords and service tokens with short-lived identity credentials, and build identity-authenticated egress proxies and API abstractions that inject and automatically rotate managed secrets for the external dependencies that still require them
- Unify authorization. Build a single interface and framework through which authorization policies are centrally managed and enforced
Our take
The inspiration for WorkOS came from the founder’s previous email startup, Nylas, and the difficulties he faced in crossing what he calls “the enterprise chasm.” The challenge of serving enterprise clients, and meeting their stringent security and admin requirements, is one that many B2B SaaS startups face as they start to scale.
WorkOS steps in at this critical stage, providing a single API driven platform which enables its customers to easily integrate with the major vendors that provide enterprise security and admin solutions. For example, rather than building individual integrations with each of the single sign-on (SSO) providers, a customer would only need to integrate with WorkOS in order to support these solutions.
Enterprise features that WorkOS is providing building blocks for include Single Sign-On, Directory Sync, Audit Trail, and more. WorkOS is helping a wide range of SaaS providers break into enterprise channels and was bolstered by substantial Series B funding in 2022. In that same year, WorkOS acquired its first company, UI framework builder Modulz, a deal that's broadening the scope of API products WorkOS can offer.
Kirsty
Company Specialist at Welcome to the Jungle
Insights
47% employee growth in 12 months
Company
Funding (last 2 of 3 rounds)
Mar 2026
$100m
SERIES C
Jun 2022
$80m
SERIES B
Total funding: $195m
Company benefits
- WorkOS pays 90% of premiums for employees and dependents to help keep your family healthy
- WorkOS provides a 3% match of your 401k contributions to help you save for retirement
- Relax and recharge with 20 days of paid yearly vacation. We also offer 12 weeks of parental leave for new parents
- Monthly stipend for gyms, yoga classes, race registrations, or whatever keeps you active
- Monthly stipend for a massage, meditation class, therapy, or activities that enhance your mental well-being
- Outfit your working space with a stipend for equipment that will keep you comfortable and productive
Company HQ
Financial District, San Francisco, CA
Leadership
Michael Grinich
(Founder & CEO)Earned a BSc in Computer Science from MIT. Previously worked in the Engineering team at Dropbox, in the Design team at Nest and was the Founder & CEO of Nylas for 4 years.
Share this job
View 25 more jobs at WorkOS