资深软件工程师，身份与访问 - AI 平台
Staff Software Engineer, Identity & Access - AI Platform
Redpanda 是首个用于代理数据交互的运行时和控制平面 —— 一个统一平台，将流处理、SQL 分析和智能连接与企业 AI 代理在生产环境中需要的治理层相结合。
建立在 Fortune 500 公司和快速成长的初创公司已信任的基础设施之上，Redpanda 完全在代理的数据路径之外实施治理，控制代理能看到什么、限制它们能做什么，并记录不可篡改的代理所接触的一切，使组织无需在创新与控制之间做出选择。
**职位简介：**
身份验证是企业为代理 AI 在接触生产数据之前设置的两个关键入口之一——与可观测性一起，它将引人注目的演示转化为安全团队真正会批准的内容。我们已经提供每数据平面的 OAuth 2.1 授权服务器和令牌库，委托工具访问，以及对外部代理客户端（Claude、ChatGPT、Cursor、Copilot Studio）通过受控路径连接的支持。接下来要解决的问题——代理如何代表人类或其他代理行动、如何证明和审计这种委托而非假设、以及 Redpanda 的身份模型如何与客户现有的 IdP 联邦（而不是取代）——仍在 Redpanda 内部和整个行业中积极定义中。代理身份、委托授权和代表（OBO）访问模式的标准正在快速变化且尚未确定：这是一个现在做出正确技术选择就能成为持久竞争优势，错误选择则会导致多年迁移痛苦的领域。
我们正在寻找一位资深软件工程师，从头到尾负责这一方向——代理的身份验证、授权和 OBO——作为涵盖代理数据平面和其运行的云平台的职责范围。这是一个高度自主、影响力大的个人贡献者角色：你将决定 Redpanda 在不断变化的环境中所做的技术选择，然后亲自投入并构建它，而不仅仅是设计它并将其移交。
**你具备：**
- 身份、访问和委托系统的权威技术知识，能够在行业尚未达成共识时，成为房间里必须做决定的人
- 对于完成客观结果充满热情——这个职位负责设计、构建和交付，不会止步于设计文档
- 能够通过影响力而非权威来领导——你
查看英文原文
_Redpanda is the first runtime and control plane for agent-data interaction — a unified platform that combines streaming, SQL analytics, and intelligent connectivity with the governance layer enterprise AI agents need in production._
_Built on infrastructure already trusted by Fortune 500 companies and fast-growing startups, Redpanda enforces governance entirely outside the agent's data path, controlling what agents see, limiting what they do, and capturing a tamper-proof record of everything they touch, so organizations never have to choose between innovation and control._
**About the Role:**
Identity is one of the two gates every enterprise puts in front of agentic AI before it touches production data — alongside observability, it is what turns a compelling demo into something a security team will actually approve. We already ship a per-data-plane OAuth 2.1 authorization server and token vault, delegated tool access, and support for external agent clients (Claude, ChatGPT, Cursor, Copilot Studio) connecting in through governed paths. What comes next — how an agent acts on behalf of a human or another agent, how that delegation is proven and audited rather than assumed, and how Redpanda's identity model federates with (rather than replaces) a customer's existing IdP — is still being actively defined, inside Redpanda and across the industry. Standards for agent identity, delegated authorization, and on-behalf-of (OBO) access patterns are moving fast and are genuinely unsettled: this is a domain where the right technical bet made now becomes a durable competitive advantage, and the wrong one becomes years of migration pain.
We're looking for a Staff Software Engineer to own that direction end to end — AuthN, AuthZ, and OBO for agents — as a charter that spans both Agentic Data Plane and the Cloud platform it runs on. This is a high-autonomy, high-influence individual contributor role: you will set the technical bet Redpanda makes on an evolving landscape, then roll up your sleeves and build it, not just architect it and hand it off.
**You are:**
- A recognized technical authority on identity, access, and delegation systems, comfortable being the person in the room who has to make the call when the industry itself hasn't converged yet
- Excited to roll up your sleeves and do what it takes to deliver objective results — this role designs, builds, and ships, it does not stop at the design doc
- Able to lead through influence rather than authority — your charter spans both Agentic Data Plane and the Cloud platform team, and on the Cloud platform side you will be driving technical direction with no reporting relationship to lean on
- Eager to thrive with the thrill and ethos of a fast growing startup
- Accountable, bring a sense of ownership, and are self-driven
**You have:**
- 10+ years of experience in software development and delivery, with deep, hands-on expertise in authentication, authorization, or identity systems specifically
- Production experience with OAuth 2.0/2.1, OIDC, token exchange or delegation patterns (e.g. RFC 8693, on-behalf-of flows), and the practical tradeoffs of running an authorization server and token vault at scale
- A strong, current point of view on where agent identity standards are heading — MCP auth, A2A, cross-app access patterns (e.g. Okta XAA, Entra Agent ID, Auth0 for AI Agents) — and the judgment to bet on a direction before the market fully settles
- Experience designing systems that must federate with, rather than replace, a customer's existing identity provider (Okta, Entra, Ping, or similar) in security-conscious enterprise environments
- A track record of driving technical direction across multiple teams or orgs as an individual contributor — through design docs, RFCs, code, and direct influence, including with teams outside your own reporting chain
- Comfortable working with a globally distributed engineering team, collaborating on GitHub, in the open, and a self starter
- Excellent written and verbal communication skills, including the ability to explain identity and delegation tradeoffs to engineers, security teams, and customers who may not share your specialist vocabulary
**You will:**
- Own the technical direction for AuthN, AuthZ, and OBO across Agentic Data Platform and the Cloud platform — deciding which emerging industry patterns Redpanda adopts, adapts, or deliberately avoids
- Design and build the systems yourself: extending the OAuth 2.1 authorization server and token vault, delegated tool-access flows, and the cryptographic delegation model that lets an agent act on-behalf-of a human or another agent with a provable, auditable chain of authority
- Partner closely with the identity-federation surface (Okta, Entra, Ping, and similar) so Redpanda enforces access locally while federating cleanly with what enterprise customers already run
- Work cross-functionally with Agentic Data Plane and Cloud platform engineering, Security, and Product to make sure identity and delegation decisions hold up under real customer security review — not just internal design review
- Represent Redpanda's technical position on agent identity externally where relevant — in customer-facing security conversations, documentation, or engagement with emerging standards efforts
- Ship to customers: this is an IC role measured on shipped, production-hardened systems, not just architecture proposals
- Mentor and level up engineers across both Agentic Data Platform and Cloud platform on identity and access concepts, without formal management authority over them
- Bring up difficult and/or systemic challenges and impediments to the attention of engineering leadership
- Actively discuss strategic topics with peers and Directors to help shape engineering's environment
- Track progress, assess risks, and actively communicate contingency and mitigation plans for the initiatives you own
**Kindly highlight if applicable to you:**
- Direct experience building or operating an OAuth 2.1/OIDC authorization server, token vault, or equivalent identity infrastructure in production
- Experience with agent-specific identity or delegation protocols (MCP auth, A2A, cross-app access/token exchange patterns) rather than only traditional human-user identity systems
- Experience contributing to or closely tracking open standards bodies or working groups relevant to identity, OAuth, or agent authorization
- Experience working in regulated or security-sensitive enterprise environments where identity and access decisions faced direct customer security review
- Prior Staff/Principal-level individual contributor experience driving technical direction across multiple engineering organizations
_U.S. base salary range for this role is $220,000 - $260,000. Our salary ranges are determined by role, level, and location. We strive to consider each candidate's job-related skills, location, experience, relevant education or training to determine individual base salary. Your talent partner will share more about the specific salary range for your preferred location during the hiring process._
_Please note that Redpanda uses artificial intelligence (AI) technology to assist in the screening and assessment of applications for this position. However, all final hiring decisions are made by our human hiring team._
_Vacancy Status: This job posting is for an existing vacancy._
Join Redpanda if you’d enjoy being part of a fast-moving, diverse, people-first organization with team members around the globe and a culture based on trust, transparency, communication, and kindness. You'll dive into a nimble, high-impact team with the latest AI tools — and the budget to actually use them.