软件工程师 - 认证
Software Engineer - Auth
关于 Supabase
Supabase 是基于 Postgres 的开发平台，由开发者为开发者打造。我们提供完整的后端解决方案，包括数据库、认证、存储、边缘函数、实时功能和向量搜索。所有服务深度集成，专为增长而设计。
关于该职位
Auth https://supabase.com/auth，使用 Go 编写 https://github.com/supabase/auth（服务端），并提供 TypeScript 客户端库 https://github.com/supabase/supabase-js、SSR https://github.com/supabase/ssr 以及其他框架和技术的客户端库，是 Supabase 堆栈中最受欢迎的产品之一。我们正在寻找一位帮助我们构建新功能并维护现有认证功能的人选。
你将负责以下工作
- 在 Go 和 TypeScript 中设计和实现安全、可扩展的认证功能。
- 跨堆栈工作：从服务端协议到 Next.js 等框架的客户端库。
- 负责 Supabase 基础设施中认证服务器的性能、可靠性和可扩展性。
- 参与认证架构的演进，包括对 OAuth、OIDC、SAML 和其他协议的支持。
- 规划和执行跨大量 Postgres 实例的安全数据库迁移。
- 构建和改进可观测性：指标、追踪、警报和仪表盘，以在大规模下保持系统健康。
- 作为产品开发流程的一部分，编写和评审 RFC。
- 与 Supabase 的工程师协作，确保开发者使用我们工具时的无缝体验。
- 支持社区，并在 GitHub、Discord 和其他渠道上响应开发者反馈。
你可能适合这个职位如果
- （必需）有 4 年以上在生产环境中编写和部署 Go 的专业经验。
- （必需）有 2 年以上在认证系统上的专业经验（实现协议支持、大规模维护）。
- （必需）有强大的关系型数据库经验（Postgres 或 MySQL）；Postgres 经验是加分项。
- 除了 Go 之外，还具备扎实的 TypeScript 知识（日常使用语言）。
- 具备扎实的 Web 技术基础知识（cookies、sessions、JWT、HTTP、浏览器 API）。
- 对认证安全有良好的理解和浓厚兴趣（密码、OAuth、OIDC 或 SAML 等协议、哈希函数、签名和密码学基础等）。
- 有与多个 Web 框架合作的经验
查看英文原文
ABOUT SUPABASE
Supabase is the Postgres development platform, built by developers for developers. We provide a complete backend solution including Database, Auth, Storage, Edge Functions, Realtime, and Vector Search. All services are deeply integrated and designed for growth.
ABOUT THE ROLE
Auth https://supabase.com/auth, written in Go https://github.com/supabase/auth (server) and with client libraries for TypeScript https://github.com/supabase/supabase-js, SSR https://github.com/supabase/ssr and for other frameworks and technologies, is one of the most popular products in the Supabase stack. We are seeking someone to help us build new and maintain existing Auth features.
WHAT YOU’LL BE RESPONSIBLE FOR
- Designing and implementing secure, scalable authentication features in Go and TypeScript.
- Working across the stack: from server-side protocols to client-side libraries for frameworks like Next.js.
- Owning the performance, reliability, and scalability of the Auth server across Supabase's infrastructure.
- Contributing to the evolution of our Auth architecture, including support for OAuth, OIDC, SAML, and other protocols.
- Planning and executing safe database migrations across a large fleet of Postgres instances.
- Building and improving observability: metrics, tracing, alerting, and dashboards to keep the system healthy at scale.
- Writing and reviewing RFCs as part of our product development process.
- Collaborating with engineers across Supabase to ensure a seamless experience for developers using our tools.
- Supporting the community and responding to developer feedback on GitHub, Discord, and other channels.
YOU MIGHT BE A GOOD FIT IF YOU
- (Required) Have 4+ years of professional experience writing and shipping Go in production.
- (Required) Have 2+ years of professional experience working on an authentication system (implementing protocol support, maintenance at scale).
- (Required) Have strong relational database experience (Postgres or MySQL); Postgres experience is a bonus.
- Have strong knowledge of TypeScript in addition to Go (languages used daily).
- Have strong knowledge of web technology fundamentals (cookies, sessions, JWT, HTTP, browser APIs).
- Have good knowledge of and deep interest in authentication security (passwords, protocols such as OAuth, OIDC or SAML, cryptography fundamentals such as hash functions, signatures and ciphers).
- Have experience working with multiple web frameworks like Next.js (or other SSR alternative in the JavaScript space) and traditional web frameworks like Ruby on Rails, Django, Laravel or equivalent (in any language).
- Have good technical writing skills (RFC process is an important part of making changes to the Auth product).
- Have hands-on experience building and operating services at significant scale.
- Have deep understanding of systems-level concerns: memory management, concurrency patterns, and compute resource optimization in Go.
- Have experience with Kubernetes and AWS (or comparable cloud platform) in a production setting.
- Have solid grasp of observability practices — metrics, distributed tracing, structured logging, and alerting (e.g., Prometheus, Grafana, OpenTelemetry).
- Have experience managing database schema migrations safely at scale.
WHAT WE OFFER
- Fully Remote
We hire globally. We believe you can do your best work from anywhere. There are no Supabase offices, but we provide a WeWork membership or co-working allowance you can use anywhere in the world.
- ESOP
Every team member receives ESOP (equity ownership) in the company. We want everyone to share in the upside of what we’re building together.
- Tech Allowance
Use this budget to set up your ideal work environment—laptop, monitor, headphones, or whatever helps you do your best work.
- Health Benefits
Supabase covers 100% of health insurance for employees and 80% for dependents, wherever you are. Your wellbeing and your family’s health are important to us.
- Annual Off-Sites
Once a year, the entire company gathers in a new city for a week of connection, collaboration, and fun. It’s a highlight of our year.
- Flexible Work
We operate asynchronously and trust you to manage your own time. You know what needs to be done and when.
- Professional Development
Every team member receives an annual education allowance to spend on learning—courses, books, conferences, or anything that supports your growth.
ABOUT THE TEAM
Supabase was born-remote and open-source-first. We believe our globally distributed team is our secret weapon in building tools developers love.
- ~400 team members
- 60+ countries
- 20+ languages spoken
- Over $1B raised (including our $500M Series F)
- 540,000+ community members
We move fast, build in public, and use what we ship. If it’s in your project, we probably use it in ours too. We believe deeply in the open-source ecosystem and strive to support—not replace—existing tools and communities.