Lovable27.05.2026
Software Engineer, Identity & Access
Зарплата не указана
Полная занятостьОфис
Обязанности
- 01Design and build the Apps Platform's identity and access management system, covering both platform-level auth (Lovable users) and app-level auth (end users of Lovable-generated apps)
- 02Implement authentication flows: OAuth 2.0/OIDC, magic links, social login providers, MFA, and session management
- 03Build a robust authorization model: RBAC, row-level security, API key management, and fine-grained permissions
- 04Own multi-tenancy isolation — ensuring that user apps, data, and credentials are securely separated
- 05Manage secrets infrastructure: secure storage, rotation, and access control for database credentials, API keys, and service tokens
- 06Migrate identity services from the current bundled setup to a fully owned, composable identity layer without breaking user sessions
- 07Operate auth as a production service: monitoring, alerting, incident response, and capacity planning for a system on the critical path of every request
- 08Collaborate with the AI and product teams to ensure that generated apps get secure-by-default auth without requiring user expertise
Требования
- 01Deep expertise in identity and access management: OAuth 2.0, OIDC, SAML, JWT, session management, and token lifecycle
- 02Experience building or operating auth systems at scale — ideally in a multi-tenant SaaS or PaaS context
- 03Strong security mindset: you treat credential leakage, privilege escalation, token theft, and tenant isolation as first-class concerns
- 04Experience with RBAC/ABAC models and row-level security in Postgres
- 05Familiarity with identity providers and auth services (Auth0, Supabase Auth, Clerk, Firebase Auth, Keycloak, etc.)
- 06Comfortable with TypeScript across backend services and API layers
- 07You've migrated auth systems or transitioned between identity providers in production without breaking user sessions
- 08Operational instincts: you think in uptime, latency percentiles, and blast radius — auth outages take down everything downstream
- 09You’re based in Stockholm or ready to relocate - this is an on-site, 5-days-a-week role
Условия
- 01On-site, 5-days-a-week role in Stockholm