Vercel is the agentic infrastructure company, freeing people and agents to ship what's next. For more than a decade we've helped builders move from idea to production with speed, security, and exceptional developer experience.
Now we're scaling our products for both agents and people to ship and run software, built in the open and trusted by OpenAI, PayPal, Ramp, Supreme, and millions of developers worldwide.
Vercel Connect helps developers give agents and AI-built apps secure access to the data, tools, and events they need—without wrestling with OAuth, credentials, and integration complexity. We’re currently building two things: 1) a platform for managing agent identity, access and permissions and 2) a set of rich connectors for the 1000s of systems (like Linear, Slack, GitHub, Google, etc.) that agents will need to talk to.
We’re solving core problems like agent identity and delegated access, tool approval and standards around making agents aware of changes on 3rd party platforms.
As a senior engineer on this team you'll not only own our APIs, token infrastructure, authorization, SDKs, and more, but work with external companies to make it easier for developers to build agents that integrate with their products. You’ll need to balance both high uptime and fast performance with flexibility to allow for seamless connection to many systems that weren’t designed with agents in mind. If you’re looking for a role that will put you at the center of how agent identity and credentials work, this is it!
What You Will Do- Ship provider integrations end to end — auth flows, token exchange, app registration, and the configuration UI — from generic API-key and OAuth presets through bespoke cases like Snowflake Partner Connect, Slack manager apps, and Microsoft Entra.
- Own and improve our infrastructure (uptime, performance, secure storage of credentials and keys) and developer experience for Connect
- Work with industry leaders within and outside of Vercel to propose and implement new authentication and authorization protocols for AI era
- Build and harden event forwarding — signature verification inbound, project-scoped identity outbound, delivered to the right deployment and environment.
- Make Connect the obvious way to give an agent a credential, extending the SDKs , consent-redirect flow, and framework adapters.
- Reduce the cost of the next hundred integrations, so most new providers become configuration rather than code.
- Work directly with the teams building on Connect, and turn what you learn into platform improvements.
- 6+ years building and operating production backend or full-stack systems, with a track record of owning a service or platform surface rather than a feature.
- You deeply understand your users problems and work in a focused manner to address them, leveling up the product you’re working on over time.
- Deep, practical understanding of OAuth 2.0/2.1, OIDC, and JWTs — not just wiring up a client library, but reasoning about authorization codes, PKCE, refresh semantics, audience and scope restriction, token exchange, and what each of those actually protects against.
- A security instinct for integration code specifically — SSRF and DNS rebinding, confused-deputy and mix-up attacks, redirect-URI validation, webhook signature verification, tenant isolation. You've either found these bugs or fixed them.
- Strong TypeScript, and comfort developing backend and frontend components.
- Experience integrating with many third-party APIs, an appetite for the reality of it — undocumented behavior, non-compliant OAuth, inconsistent errors — and the judgment to absorb that mess behind a clean abstraction.
- You're comfortable with ambiguity, ship incrementally against a large surface, and communicate clearly with the teams building on top of you.
- You push the envelope of leveraging agents and AI in ur dev workflow, giving you the insight to help build the agent platform of the future
- You've built or operated an OAuth authorization server, an identity provider, or a multi-tenant integrations platform.
- Experience with MCP, agent tool-calling, or delegated-access and consent patterns.
- Prior work on integration marketplaces, partner engineering, or webhook infrastructure at scale.
- Open source contributions, particularly in the auth, Next.js, or agent tooling ecosystems.
- Competitive compensation package, including equity.
- Inclusive Healthcare Package.
- Learn and Grow - we provide mentorship and send you to events that help you build your network and skills.
- Flexible Time Off.
- We will provide you the gear you need to do your role, and a WFH budget for you to outfit your space as needed.
The San Francisco, CA base pay range for this role is $196,000-$294,000. Actual salary will be based on job-related skills, experience, and location. Compensation outside of San Francisco may be adjusted based on employee location. The total compensation package may include benefits, equity-based compensation, and eligibility for a company bonus or variable pay program depending on the role. Your recruiter can share more details during the hiring process.
- Privacy: Please review our Job Applicant Privacy Policy for more information on how we handle your data.
- Equal Opportunity: Vercel is committed to fostering and empowering an inclusive community within our organization. We do not discriminate on the basis of race, religion, color, gender expression or identity, sexual orientation, national origin, citizenship, age, marital status, veteran status, disability status, or any other characteristic protected by law. Vercel encourages everyone to apply for our available positions, even if they don't necessarily check every box on the job description.
Skills Required
- 6+ years building and operating production backend or full-stack systems
- Experience owning a service or platform surface rather than only individual features
- Deep practical understanding of OAuth 2.0/2.1, OIDC, and JWTs
- Understanding of authorization codes, PKCE, refresh semantics, audience and scope restriction, and token exchange
- Security experience with integration vulnerabilities, including SSRF, DNS rebinding, confused-deputy attacks, mix-up attacks, redirect URI validation, webhook signature verification, and tenant isolation
- Strong TypeScript skills and comfort developing backend and frontend components
- Experience integrating with many third-party APIs
- Ability to work with ambiguity, ship incrementally, and communicate clearly
- Experience building or operating an OAuth authorization server, identity provider, or multi-tenant integrations platform
- Experience with MCP, agent tool-calling, delegated access, or consent patterns
- Experience with integration marketplaces, partner engineering, or webhook infrastructure at scale
- Open source contributions in authentication, Next.js, or agent tooling ecosystems
What the Team is Saying
What We Do
From solo developers building their first app to large enterprise teams if it needs to be fast, reliable, and beautifully built, it runs on Vercel. Our platform powers millions of deployments a day. We started with a simple belief: the web should be fast for everyone, everywhere. That belief became Next.js. Then a platform. Then the infrastructure layer for the AI-native web. We are backed by the amazing team at Accel and CRV, and we're headquartered in San Francisco.
Vercel Offices
Hybrid Workspace
Employees engage in a combination of remote and on-site work.
Vercel is a remote-friendly company. Some roles are in-office (SF, NYC and others), and some are fully remote. For the right candidate, flexible arrangements are available, supported by home office and wellness stipends.
