Overview
WHO WE ARE
Full job description
WHO WE ARE
At Basis, we empower agencies and brands with cutting-edge software that automates digital media operations. Our all-in-one platform supports seamless planning, reporting, and financial reconciliation across direct, programmatic, search, and social media.
We’re not just building advanced technology; we’re also building a culture where passionate, motivated individuals come together to drive meaningful change. Our commitment to inclusivity and growth ensures our employees thrive both professionally and personally.
With our headquarters in Chicago, we offer flexible work options across the U.S. and Canada, including remote, hybrid, or on-site at headquarters.
Extend our identity layer in Auth0: authentication flows, token issuance, identity federation. Build and maintain our ReBAC authorization model in OpenFGA, the system every authorization decision on the platform runs through. Own the details of OAuth 2.0 and OIDC in our stack: token flows, JWKS validation, scopes, audience restrictions. Define how AI agents authenticate and receive scoped permissions, so non-human actors operate under the same authorization model as people. Drive technical projects that cut across multiple teams and systems, from design through production. Set technical direction and quality standards for the team and review the work that ships against them. Support and mentor other engineers through code review, design discussions, and day-to-day collaboration.
5+ years of professional software engineering experience. Deep, hands-on knowledge of OAuth 2.0 and OpenID. Experience with ReBAC systems (OpenFGA, Zanzibar, SpiceDB): modeling schemas, writing and testing tuple-based policies, and reasoning about permission evaluation performance. Experience with Auth0 or a comparable identity provider (Okta, Azure AD, Keycloak). Strong backend skills in Java, Ruby, or Python, with frameworks such as Spring Boot, Rails, or Django. Regular use of AI coding tools (Claude Code, Cursor, Codex) for code generation, debugging, and exploring unfamiliar code, and the judgment to own and vet what they produce. A collaborative approach to design and decision-making, and a commitment to building an inclusive team.
Experience building or scaling auth systems for a platform with complex organizational hierarchies (agencies, multi-tenant SaaS, etc.). Familiarity with policy-as-code or attribute-based access control (ABAC). Background in ad tech or programmatic advertising. Contributions to open-source identity or authorization projects.
Languages: Ruby, JavaScript, Java Auth & Identity: Auth0, OpenFGA Infrastructure: AWS, Docker, Kubernetes Data: PostgreSQL, Redis Frameworks & Tools: Spring Boot, Rails, Node.js, React, RabbitMQ, Sidekiq
Tips for this job
Practical JobOpportunity guidance. These tips do not replace official rules or create new eligibility requirements.
- Tailor the CV and application to the responsibilities and required skills stated on the official employer page.
- Use concrete evidence of relevant work, projects and measurable results rather than generic claims.
- Confirm location, work authorization, remote restrictions and sponsorship terms before applying.
- Apply through the original employer or official recruitment destination shown on this page.
JobOpportunity.info helps you discover and organize source listings. Confirm eligibility, dates, salary/funding and application instructions on the original source before submitting anything.
Apply through JobOpportunity →Browse current JobOpportunity listings from Basis Cash (lever) →
