Lovable

1 month ago

Software Engineer, Identity & Access

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI

Last checked: 2 hours agoStatus: Live

Job Summary

Own the identity and access management stack for the Lovable Apps Platform, shaping secure authentication and authorization across platform and end-user apps. Build a composable identity layer, RBAC/ABAC models, multi-tenancy isolation, and secrets management, collaborating with AI/product teams to ensure secure-by-default auth for millions of end users.

Location: Stockholm

Workplace: Onsite

Employment Type: Full time

Job Function: Software Engineering

Key Responsibilities

•Design and build the Apps Platform's identity and access management system, covering both platform-level auth (Lovable users) and app-level auth (end users of Lovable-generated apps)
•Implement authentication flows: OAuth 2.0/OIDC, magic links, social login providers, MFA, and session management
•Build a robust authorization model: RBAC, row-level security, API key management, and fine-grained permissions
•Own multi-tenancy isolation — ensuring that user apps, data, and credentials are securely separated
•Manage secrets infrastructure: secure storage, rotation, and access control for database credentials, API keys, and service tokens

Key Requirements

•Deep expertise in identity and access management: OAuth 2.0, OIDC, SAML, JWT, session management, and token lifecycle.
•Experience building or operating auth systems at scale — ideally in a multi-tenant SaaS or PaaS context.
•Strong security mindset: credential leakage, privilege escalation, token theft, and tenant isolation.
•Experience with RBAC/ABAC models and row-level security in Postgres.
•Familiarity with identity providers and auth services (Auth0, Supabase Auth, Clerk, Firebase Auth, Keycloak, etc.)

Experience:SaaSAICloudSecurityIdentity

Skills:CommunicationProblem-solvingCollaborationSecurity-mindedRisk management

Languages:English

Tech Stack:TypeScriptGolangRustPostgreSQLOAuth 2.0OIDCSAMLJWTRBACABACKubernetesTerraformCloudflareGCPAWSFirestoreBigQueryClickHouseGoTrue

Company Brief

Lovable

Lovable builds a conversational AI platform that lets users create apps and websites by chatting with AI, automating full‑stack development and integrations to rapidly produce production-ready software.

Industry: Developer Tools

Company Size: Medium (51 to 250 employees)

Revenue: USD 100M to 250M

Growth: Scaleup

Valuation: Unicorn (USD 1B+)

Funding: Series B

Headquarters: Stockholm, Sweden

Founded: 2023

Website LinkedIn Glassdoor

Loading job details...

Preparing the role view and application actions.

Lovable

1 month ago

Software Engineer, Identity & Access

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI

Last checked: 2 hours agoStatus: Live

Job Summary

Location: Stockholm

Workplace: Onsite

Employment Type: Full time

Job Function: Software Engineering

Key Responsibilities

•Design and build the Apps Platform's identity and access management system, covering both platform-level auth (Lovable users) and app-level auth (end users of Lovable-generated apps)
•Implement authentication flows: OAuth 2.0/OIDC, magic links, social login providers, MFA, and session management
•Build a robust authorization model: RBAC, row-level security, API key management, and fine-grained permissions
•Own multi-tenancy isolation — ensuring that user apps, data, and credentials are securely separated
•Manage secrets infrastructure: secure storage, rotation, and access control for database credentials, API keys, and service tokens

Key Requirements

•Deep expertise in identity and access management: OAuth 2.0, OIDC, SAML, JWT, session management, and token lifecycle.
•Experience building or operating auth systems at scale — ideally in a multi-tenant SaaS or PaaS context.
•Strong security mindset: credential leakage, privilege escalation, token theft, and tenant isolation.
•Experience with RBAC/ABAC models and row-level security in Postgres.
•Familiarity with identity providers and auth services (Auth0, Supabase Auth, Clerk, Firebase Auth, Keycloak, etc.)

Experience:SaaSAICloudSecurityIdentity

Skills:CommunicationProblem-solvingCollaborationSecurity-mindedRisk management

Languages:English

Tech Stack:TypeScriptGolangRustPostgreSQLOAuth 2.0OIDCSAMLJWTRBACABACKubernetesTerraformCloudflareGCPAWSFirestoreBigQueryClickHouseGoTrue

Company Brief

Lovable

Industry: Developer Tools

Company Size: Medium (51 to 250 employees)

Revenue: USD 100M to 250M

Growth: Scaleup

Valuation: Unicorn (USD 1B+)

Funding: Series B

Headquarters: Stockholm, Sweden

Founded: 2023

Website LinkedIn Glassdoor