Full-Stack Engineer (Identity & Security Engineer)

About the role

Our client is redefining how humans govern technology by building a Human‑Led AI Orchestration Layer. As an Identity & Security Engineer you will design and implement the core identity, access, and security foundation that ensures every AI‑driven action is authorized, auditable, and aligned with human intent.

Key responsibilities

• Implement and manage authentication using Clerk across frontend and backend services.
• Design RBAC and permission models that support human‑led decision workflows.
• Integrate identity flows with FastAPI (Python) backend and secure authentication in React + TypeScript frontend applications.
• Enforce consistent authorization across APIs, services, agents, tools, and data access layers.
• Apply OAuth2, JWT, CORS, CSRF protection, and rate‑limiting best practices.
• Harden APIs and identity boundaries for multi‑tenant SaaS use cases.
• Document identity architecture and transfer knowledge to the team.
• Design capability‑based permission scopes for AI agents and implement human‑in‑the‑loop approval gates.
• Prevent privilege escalation, cross‑tenant access, and unauthorized tool or data usage by agents.

Required profile

• Hands‑on experience implementing authentication and authorization in web applications.
• Strong experience with Clerk or equivalent identity providers.
• Deep understanding of OAuth2, JWT, and session management.
• Experience building backend services with FastAPI (Python).
• Frontend integration experience with React and TypeScript.

Required skills

• Clerk (or similar identity provider)
• OAuth2
• JWT
• Session management
• FastAPI
• Python
• React
• TypeScript
• RBAC design
• CORS
• CSRF protection
• Rate limiting
• API hardening
• Multi‑tenant SaaS security