PitchMeAI Jobs
Baselayer

Senior Engineer, Agentic Identity

Baselayer · San Francisco, California

Posted 15 days ago · $230,000 – $340,000

or apply directly on Baselayer's site. We never take the application ourselves.

Is this posting real?

This role has been open
15 days
Baselayer's roles stay open a median of 15 days
Reposted
No
Salary listed
Yes
100% of Baselayer's roles list one
Ghost-job risk at Baselayer
low
0 stale, 0 reposted of 16 open
Hiring momentum
46 roles opened in the last 90 days
↑ up vs. the prior 90 days
Last confirmed on the employer's board
2026-09-17

Measured from postings appearing on and disappearing from Baselayer's own greenhouse board since 2026-08-03. Full hiring picture for Baselayer.

About this role

As a Senior Engineer at Baselayer, you will be responsible for building and maintaining critical components of a cryptographic identity substrate, including the runtime issuer/mint and user account management systems. You will work with a small team to tackle complex engineering challenges related to real-time entity resolution and identity verification, using technologies like Python and Go. Your role will involve shipping production-ready systems that ensure cryptographic correctness and high performance.

Our read on this posting4.8out of 5
benefits
5/5
freshness
4/5
career value
5/5
role clarity
5/5
pay transparency
5/5

Scored from the posting itself — how clearly the role is described, how much it says about pay and benefits, and how recently it was listed. Not a judgement of Baselayer as an employer.

What you need

  • Shipped systems where cryptographic correctness was load-bearing: OAuth/OIDC IdP, token issuer, signing service, HSM-backed signer, passkey/WebAuthn flow, or similar.
  • Fluent in Python and Go, or strong in one with a track record of learning the other quickly.
  • Reads RFCs as primary sources and holds informed opinions on JWK thumbprint canonicalization, pairwise-sub derivation, and Signature-Input header serialization.
  • Deep understanding of the distinction between identity and authorization, mandate and claim, snapshot and live state.
  • Production experience with async Python on Postgres, including migration safety and observability.

Nice to have

  • Verifiable credentials / SSI / DID work - especially SD-JWT-VC, OID4VC, or the W3C VC stack.
  • Certificate Transparency, Trillian, or similar append-only-log experience.
  • KYC/KYB pipeline experience: provider abstraction, evidence retention, eIDAS/FATF CDD level mapping, ownership-chain resolution.
  • Edge/CDN engineering - Cloudflare Workers, Fastly Compute, Envoy filters, or mTLS at the edge.
  • Familiarity with AP2, x402, MPP, UCP, or Mastercard VI specs and how identity rides alongside mandate.

What you get

  • Flexible PTO so you can recharge without red tape
  • In-person energy: We're based in SF and meet in the office 4 days a week
  • Competitive compensation: We pay well and back it with equity. We want you to think and act like an owner
  • Career rocket fuel: You'll help build the foundation of a high-growth startup, working side by side with experienced founders and team members who've done it before
  • We cover 100% of your health, dental, and vision premiums. No surprise deductions from your paycheck
  • 401(k) with company match: We match your contributions so your future self benefits too

Worth weighing

  • No specific mention of remote work flexibility beyond hybrid 4 days per week in office.
  • The role involves complex engineering challenges that may require a steep learning curve for those unfamiliar with cryptographic systems.

Summarised from Baselayer's posting. Read the full original.

Listed by Baselayer on their greenhouse job board, last confirmed open on 2026-09-17. PitchMeAI is not the employer.

More roles at Baselayer

All 16 open roles at Baselayer →