Latest AI JobsBrowse Jobs
Runlayer logo

Member of Technical Staff - Identity

RunlayerHybrid NYC / Remote (US Timezones)Engineering
Apply on company site
Salary
Not listed
Job type
Full-time
Work mode
Remote
Posted
10 Apr 2026
Status
Open · checked 7d ago

About this role

The Member of Technical Staff - Identity position at Runlayer is a full-time engineering role focused on building secure authentication and authorization systems for AI-to-enterprise connections. Based in New York City on a hybrid schedule or available as a remote position across US timezones, this role suits experienced software engineers who want to shape industry-wide AI agent identity protocols and enterprise security platforms.

Role Overview

In this capacity, the engineer owns the authentication and authorization layer that secures every connection between artificial intelligence tools and enterprise systems. The selected candidate builds the OAuth broker supporting enterprise integrations, manages identity propagation for AI agents, and partners directly with enterprise clients to resolve complex security challenges while contributing to the broader MCP Auth specification.

Key Responsibilities

Design and develop authentication and authorization frameworks for MCP servers, covering OAuth 2.0, dynamic client registration, and token management.
Expand the OAuth broker responsible for enterprise identity integrations spanning various third-party vendors.
Establish identity propagation methods for artificial intelligence agents to guarantee secure, auditable access to enterprise environments.
Connect with enterprise identity providers including Okta, WorkOS, Azure AD, and SCIM configurations.
Formulate fine-grained access control guidelines regarding MCP resources and tools.
Engage closely with enterprise clients to address practical identity use cases.
Participate in the evolution of the MCP Auth spec to establish industry standards for agent identity.

Requirements

Minimum of five years of software engineering background centered around authorization, authentication, or identity systems.
Extensive familiarity with OAuth 2.0 and OIDC protocols, encompassing token exchange, audience restriction, and dynamic client registration.
Track record of constructing or connecting enterprise identity platforms such as Okta, WorkOS, Auth0, AWS IAM, or GCP IAM.
Solid grounding in API security principles and distributed architecture.
Proficiency in Python and TypeScript.
Ability to interact directly with enterprise customers to gather security requirements.
Active utilization of artificial intelligence coding assistants like Claude Code or Cursor.

Nice to Have

Familiarity with Kubernetes-native authorization approaches or service mesh security measures.
Experience in machine learning security topics including differential privacy or LLM security studies.
Previous background handling identity protocols for multi-tenant SaaS architectures.
Prior knowledge regarding the Model Context Protocol specification.

Skills and Tools

Python
TypeScript
OAuth 2.0 and OIDC
Enterprise Identity Providers (Okta, WorkOS, Azure AD, Auth0, AWS IAM, GCP IAM)
Distributed Systems and API Security

Salary and Benefits

Competitive salary paired with equity compensation.
Paid time off including vacation days, sick leave, and parental leave.
Dedicated budget for professional development, conferences, and certifications.
Choice of top-tier laptop and hardware accessories.
Comprehensive health, dental, and vision insurance coverage.
Direct exposure to innovative enterprise customers.

About the Company

Runlayer provides a centralized platform for Model Context Protocols, skills, and agents featuring security, governance, and observability. The company recently secured a Series A funding round backed by prominent investors and is trusted by numerous technology and enterprise organizations.

How to Apply

Interested candidates should visit the official Runlayer careers page or contact the company via email with details regarding their background and interests.

Skills and tech stack

PythonAWSGCPAzureKubernetesReactTypeScriptLLMdbt

Questions candidates ask

Where is this job located?

This position is available as a hybrid role in New York City or as a remote position across US timezones.

What programming languages are used in the stack?

The engineering stack relies on Python for the backend and TypeScript for the frontend.

How many years of experience are required?

Applicants must have 5 or more years of software engineering experience with a strong focus on identity, authentication, or authorization systems.

What benefits are included?

Benefits include competitive salary and equity, paid time off, professional development budgets, choice of equipment, and comprehensive health, dental, and vision coverage.

Will this role involve interacting with customers?

Yes, the role involves working directly with enterprise customers to understand and solve their security requirements.

Ready to apply?

The application is on the official Runlayer careers page.

Apply on company site