Delinea

2 weeks ago

Staff Software Engineer: Agent Identity and Authorization

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI

Last checked: 2 hours agoStatus: Live

Job Summary

Design and build the core identity and authorization building blocks for an AI security platform, including delegated actions, composite identities, and audit attribution for agent activity. Create a real-time authorization engine and help evaluate policy technologies such as Cedar, OPA, or AuthZEN. Define trust for identities from platforms like Microsoft Entra and Salesforce, and implement continuous evaluation using live session and decision signals. Own interfaces and lead technical direction across teams.

Location: Redwood City

Workplace: Remote

Employment Type: Full time

Job Function: Software Engineering

Seniority: Mid level

Key Responsibilities

•Design identity models for AI agents, including delegated on-behalf-of actions, composite identities, and audit attribution for agent activity.
•Build a real-time authorization engine to decide what an agent is allowed to do, including selecting underlying policy technology (e.g., Cedar, OPA, AuthZEN).
•Define trust establishment for identities issued by platforms such as Microsoft Entra and Salesforce, and standards like OpenID Connect for agents.
•Implement authorization and continuous-evaluation capabilities using live session and decision signals.
•Own platform interfaces and contracts and provide technical leadership across teams by setting direction and raising standards.

Pay and Benefits

Salary: USD 150,000 - 188,000 annually

Perks:Health InsurancePensionLife InsurancePaid Leave

Key Requirements

•Typically 10+ years of software engineering experience with deep expertise in identity, authorization, or distributed systems security.
•Hands-on experience building authorization or policy systems such as Cedar, OPA, OpenFGA, or a comparable engine.
•Working knowledge of identity and token standards such as OAuth, OpenID Connect, SPIFFE and SPIRE, or workload identity federation.
•A track record of designing systems and interfaces that other teams build on at scale.
•Ability to lead technical decisions across multiple teams and communicate clearly to varied audiences.

Experience:10+ yearsIdentity securityDistributed systemsAI security

Skills:Technical leadershipCollaborationProblem-solvingCommunication

Tech Stack:CedarOPAAuthZENOpenFGAOAuthOpenID ConnectMicrosoft EntraSalesforceSPIFFESPIREWorkload identity federation

Eligibility

Visa:F1-OPTF1-CPTH1BTNL1J1

Work Authorization:Authorization required. Sponsorship not provided.

Company Brief

Delinea

Provides privileged access management and identity security solutions that centralize authorization for human and machine identities, securing hybrid-cloud infrastructure, applications, and data for enterprises worldwide.

Industry: Cybersecurity

Company Size: Enterprise (1,001+ employees)

Revenue: USD 250M to 500M

Growth: Scaleup

Valuation: Unicorn (USD 1B+)

Funding: Private Equity Backed

Headquarters: San Francisco, United States

Founded: 2004

Glassdoor: 3.6

Website LinkedIn Glassdoor

Loading job details...

Preparing the role view and application actions.

Delinea

2 weeks ago

Staff Software Engineer: Agent Identity and Authorization

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI

Last checked: 2 hours agoStatus: Live

Job Summary

Location: Redwood City

Workplace: Remote

Employment Type: Full time

Job Function: Software Engineering

Seniority: Mid level

Key Responsibilities

•Design identity models for AI agents, including delegated on-behalf-of actions, composite identities, and audit attribution for agent activity.
•Build a real-time authorization engine to decide what an agent is allowed to do, including selecting underlying policy technology (e.g., Cedar, OPA, AuthZEN).
•Define trust establishment for identities issued by platforms such as Microsoft Entra and Salesforce, and standards like OpenID Connect for agents.
•Implement authorization and continuous-evaluation capabilities using live session and decision signals.
•Own platform interfaces and contracts and provide technical leadership across teams by setting direction and raising standards.

Pay and Benefits

Salary: USD 150,000 - 188,000 annually

Perks:Health InsurancePensionLife InsurancePaid Leave

Key Requirements

•Typically 10+ years of software engineering experience with deep expertise in identity, authorization, or distributed systems security.
•Hands-on experience building authorization or policy systems such as Cedar, OPA, OpenFGA, or a comparable engine.
•Working knowledge of identity and token standards such as OAuth, OpenID Connect, SPIFFE and SPIRE, or workload identity federation.
•A track record of designing systems and interfaces that other teams build on at scale.
•Ability to lead technical decisions across multiple teams and communicate clearly to varied audiences.

Experience:10+ yearsIdentity securityDistributed systemsAI security

Skills:Technical leadershipCollaborationProblem-solvingCommunication

Tech Stack:CedarOPAAuthZENOpenFGAOAuthOpenID ConnectMicrosoft EntraSalesforceSPIFFESPIREWorkload identity federation

Eligibility

Visa:F1-OPTF1-CPTH1BTNL1J1

Work Authorization:Authorization required. Sponsorship not provided.

Company Brief

Delinea

Industry: Cybersecurity

Company Size: Enterprise (1,001+ employees)

Revenue: USD 250M to 500M

Growth: Scaleup

Valuation: Unicorn (USD 1B+)

Funding: Private Equity Backed

Headquarters: San Francisco, United States

Founded: 2004

Glassdoor: 3.6

Website LinkedIn Glassdoor