{"version":"0.1","company":{"name":"YubHub","url":"https://yubhub.co","jobsUrl":"https://yubhub.co/jobs/skill/authentication-and-authorisation-systems"},"x-facet":{"type":"skill","slug":"authentication-and-authorisation-systems","display":"Authentication And Authorisation Systems","count":1},"x-feed-size-limit":100,"x-feed-sort":"enriched_at desc","x-feed-notice":"This feed contains at most 100 jobs (the most recently enriched). For the full corpus, use the paginated /stats/by-facet endpoint or /search.","x-generator":"yubhub-xml-generator","x-rights":"Free to redistribute with attribution: \"Data by YubHub (https://yubhub.co)\"","x-schema":"Each entry in `jobs` follows https://schema.org/JobPosting. YubHub-native raw fields carry `x-` prefix.","jobs":[{"@context":"https://schema.org","@type":"JobPosting","identifier":{"@type":"PropertyValue","name":"YubHub","value":"job_eddcde8e-4ee"},"title":"Staff Software Engineer, Enterprise Platform","description":"<p>Join our Enterprise Platform team and build the infrastructure foundations that enable the world&#39;s largest organisations to run Replit within their security and compliance boundaries.</p>\n<p>As a Software Engineer on this team, you&#39;ll design and implement the deployment flexibility, networking capabilities, authorisation systems, and data controls that enterprises require, from single-tenant architectures and private connectivity to custom policy enforcement and customer-managed encryption.</p>\n<p>You&#39;ll work at the intersection of cloud infrastructure and enterprise requirements, partnering with Platform Engineering, Security, and Sales to ship capabilities that unlock adoption at demanding organisations.</p>\n<p>**Key Responsibilities:&quot;</p>\n<ul>\n<li>Build enterprise deployment infrastructure: Design and implement single-tenant and dedicated deployment options, enabling customers to run Replit with the isolation guarantees their security posture requires.</li>\n</ul>\n<ul>\n<li>Implement private networking capabilities: Build VPC peering, private connectivity, and static IP configurations that allow enterprises to integrate Replit into their existing network architectures.</li>\n</ul>\n<ul>\n<li>Design authorisation services: Build the authorisation infrastructure that enforces custom enterprise policies; enabling fine-grained access controls, custom permission models, and policy enforcement that integrates with customers&#39; existing identity and governance systems.</li>\n</ul>\n<ul>\n<li>Ship data protection features: Implement bring-your-own-key (BYOK) encryption, customer-managed keys, and data residency controls that give enterprises ownership over their most sensitive data.</li>\n</ul>\n<ul>\n<li>Develop infrastructure automation: Write Terraform modules and automation that enable reliable, repeatable enterprise deployments across regions and configurations.</li>\n</ul>\n<ul>\n<li>Debug and harden systems: Dive deep into complex infrastructure problems spanning networking, authorisation, Kubernetes, and cloud services to make our enterprise platform more robust and diagnosable.</li>\n</ul>\n<ul>\n<li>Partner with go-to-market teams: Collaborate with Sales and Customer Success to understand enterprise infrastructure requirements, scope technical solutions, and unblock deployments.</li>\n</ul>\n<ul>\n<li>Contribute to technical strategy: Help define SLAs/SLOs for enterprise infrastructure reliability; participate in build-vs-buy decisions for complex infrastructure capabilities.</li>\n</ul>\n<p>**Requirements:&quot;</p>\n<ul>\n<li>7+ years of experience in Infrastructure Engineering, Platform Engineering, or similar roles.</li>\n</ul>\n<ul>\n<li>Strong programming skills in Go, Typescript or Python; you write high-quality, well-tested code.</li>\n</ul>\n<ul>\n<li>Experience with Kubernetes and cloud-native technologies in production environments.</li>\n</ul>\n<ul>\n<li>Solid understanding of cloud networking: VPCs, peering, private connectivity, load balancers, DNS.</li>\n</ul>\n<ul>\n<li>Experience with infrastructure as code (Terraform) and configuration management.</li>\n</ul>\n<ul>\n<li>Familiarity with authentication and authorisation systems: OAuth/OIDC, RBAC/ABAC models, policy enforcement.</li>\n</ul>\n<ul>\n<li>Familiarity with security and encryption fundamentals: TLS, encryption at rest, key management concepts.</li>\n</ul>\n<ul>\n<li>Strong debugging skills with an ability to trace issues across distributed systems.</li>\n</ul>\n<ul>\n<li>Excellent written communication; you can explain technical trade-offs clearly to both engineers and non-technical stakeholders.</li>\n</ul>\n<p>**Nice to Have:&quot;</p>\n<ul>\n<li>Experience with Google Cloud Platform (GCP) services, networking, and IAM.</li>\n</ul>\n<ul>\n<li>Experience building multi-tenant or single-tenant SaaS infrastructure.</li>\n</ul>\n<ul>\n<li>Familiarity with enterprise compliance frameworks (SOC 2, FedRAMP, HIPAA) and how they translate to infrastructure requirements.</li>\n</ul>\n<ul>\n<li>Experience with customer-managed encryption keys (CMEK/BYOK) implementations.</li>\n</ul>\n<ul>\n<li>Background in developer platforms, cloud IDEs, or developer productivity products.</li>\n</ul>\n<p>**Benefits:&quot;</p>\n<ul>\n<li>Competitive salary and equity.</li>\n</ul>\n<ul>\n<li>401(k) program with a 4% match.</li>\n</ul>\n<ul>\n<li>Health, dental, vision, and life insurance.</li>\n</ul>\n<ul>\n<li>Short-term and long-term disability.</li>\n</ul>\n<ul>\n<li>Paid parental, medical, caregiver leave.</li>\n</ul>\n<ul>\n<li>Commuter benefits.</li>\n</ul>\n<ul>\n<li>Monthly wellness stipend.</li>\n</ul>\n<ul>\n<li>Autonomous work environment.</li>\n</ul>\n<ul>\n<li>In-office set-up reimbursement.</li>\n</ul>\n<ul>\n<li>Flexible time off (FTO) + holidays.</li>\n</ul>\n<ul>\n<li>Quarterly team gatherings.</li>\n</ul>\n<ul>\n<li>In-office amenities.</li>\n</ul>\n<p style=\"margin-top:24px;font-size:13px;color:#666;\">XML job scraping automation by <a href=\"https://yubhub.co\">YubHub</a></p>","url":"https://yubhub.co/jobs/job_eddcde8e-4ee","directApply":true,"hiringOrganization":{"@type":"Organization","name":"Replit","sameAs":"https://replit.com/","logo":"https://logos.yubhub.co/replit.com.png"},"x-apply-url":"https://jobs.ashbyhq.com/replit/61cfbcb7-cd1e-49ab-82a1-e93c3962e343","x-work-arrangement":"hybrid","x-experience-level":"staff","x-job-type":"Full time","x-salary-range":"$240K - $350K","x-skills-required":["Go","Typescript","Python","Kubernetes","Cloud-native technologies","Cloud networking","Terraform","Configuration management","Authentication and authorisation systems","Security and encryption fundamentals","Debugging skills"],"x-skills-preferred":["Google Cloud Platform (GCP)","Multi-tenant or single-tenant SaaS infrastructure","Enterprise compliance frameworks","Customer-managed encryption keys (CMEK/BYOK)","Developer platforms","Cloud IDEs","Developer productivity products"],"datePosted":"2026-04-24T13:17:41.892Z","jobLocation":{"@type":"Place","address":{"@type":"PostalAddress","addressLocality":"Foster City, CA (Hybrid) In office M,W,F"}},"employmentType":"FULL_TIME","occupationalCategory":"Engineering","industry":"Technology","skills":"Go, Typescript, Python, Kubernetes, Cloud-native technologies, Cloud networking, Terraform, Configuration management, Authentication and authorisation systems, Security and encryption fundamentals, Debugging skills, Google Cloud Platform (GCP), Multi-tenant or single-tenant SaaS infrastructure, Enterprise compliance frameworks, Customer-managed encryption keys (CMEK/BYOK), Developer platforms, Cloud IDEs, Developer productivity products","baseSalary":{"@type":"MonetaryAmount","currency":"USD","value":{"@type":"QuantitativeValue","minValue":240000,"maxValue":350000,"unitText":"YEAR"}}}]}