Apply on Employer SiteApply Now
BaselayerPosted Oct 8, 2026
Senior Engineer, Agentic Identity
San Franciscofull timeOn Sitesenior$230k–$340kH1B: no
Baselayer Senior Engineer, Agentic Identity at Baselayer to build and maintain cryptographic identity substrate components. Ship production features including issuer mint, edge verification, Passport, or Merkle audit log.
Responsibilities
- AI agents are beginning to act on behalf of people and businesses against publishers, banks, payment networks, and APIs. Every counterparty today answers identity questions on its own - self-asserted API keys, third-party cookies, pixel trackers. That model breaks the moment the actor is an agent. We're building KYA (Know Your Agent) - a cryptographic identity substrate that replaces self-assertion with third-party-issued credentials, verifiable by any counterparty. We're hiring an engineer to own a meaningful surface of the substrate - issuer mint, edge verification, Passport, or Merkle audit log - and ship it to production.
- Build and maintain the runtime issuer/mint: OAuth Token Exchange (RFC 8693), JWS credentials (RFC 7515/7519, SD-JWT-VC), and Merkle audit log with real-time revocation.
- Own and evolve the wire format and claim registry: JWT profile, verification_level/verification_method enums, and eIDAS/NIST IAL/FATF CDD crosswalk.
- Implement sub-millisecond JWS verification and Web Bot Auth signature checks (RFC 9421) at the HTTP edge for counterparty CDNs, merchants, and publisher paywalls.
- Build and maintain Passport - the user's cloud-resident principal account with canonical handle, KYC/KYB record, authorized-operators list, audit feed, and authenticator binding.
- Develop operator integration: embedded KYB onboarding inside first OAuth 2.0 consent, per-operator opt-in, and webhook delivery via Svix.
Benefits
- Dental
- Vision
- 401(k)
- PTO
- Equity/RSU
Company
Baselayer
View company pageSource: greenhouse
Active within the past hour