ABOUT THE TEAM
The Auth team owns the systems that decide who can do what across Basis: authentication, identity, and fine-grained authorization for a platform built on complex agency and org hierarchies. We're an enabling team: every product team at Basis depends on the primitives, policies, and infrastructure we build and own. That now includes authorization for AI agents operating alongside human users, not just human users alone.
WHAT YOU'LL DO
- Extend our identity layer in Auth0: authentication flows, token issuance, identity federation.
- Build and maintain our ReBAC authorization model in OpenFGA, the system every authorization decision on the platform runs through.
- Own the details of OAuth 2.0 and OIDC in our stack: token flows, JWKS validation, scopes, audience restrictions.
- Define how AI agents authenticate and receive scoped permissions, so non-human actors operate under the same authorization model as people.
- Drive technical projects that cut across multiple teams and systems, from design through production.
- Set technical direction and quality standards for the team and review the work that ships against them.
- Support and mentor other engineers through code review, design discussions, and day-to-day collaboration.
WHAT YOU BRING TO THE TABLE
- 5+ years of professional software engineering experience.
- Deep, hands-on knowledge of OAuth 2.0 and OpenID.
- Experience with ReBAC systems (OpenFGA, Zanzibar, SpiceDB): modeling schemas, writing and testing tuple-based policies, and reasoning about permission evaluation performance.
- Experience with Auth0 or a comparable identity provider (Okta, Azure AD, Keycloak).
- Strong backend skills in Java, Ruby, or Python, with frameworks such as Spring Boot, Rails, or Django.
- Regular use of AI coding tools (Claude Code, Cursor, Codex) for code generation, debugging, and exploring unfamiliar code, and the judgment to own and vet what they produce.
- A collaborative approach to design and decision-making, and a commitment to building an inclusive team.
BONUS POINTS
- Experience building or scaling auth systems for a platform with complex organizational hierarchies (agencies, multi-tenant SaaS, etc.).
- Familiarity with policy-as-code or attribute-based access control (ABAC).
- Background in ad tech or programmatic advertising.
- Contributions to open-source identity or authorization projects.
OUR TECH STACK
- Languages: Ruby, JavaScript, Java
- Auth & Identity: Auth0, OpenFGA
- Infrastructure: AWS, Docker, Kubernetes
- Data: PostgreSQL, Redis
- Frameworks & Tools: Spring Boot, Rails, Node.js, React, RabbitMQ, Sidekiq
Skills Required
- 5+ years of professional software engineering experience
- Deep, hands-on knowledge of OAuth 2.0 and OpenID
- Experience with ReBAC systems such as OpenFGA, Zanzibar, or SpiceDB, including schema modeling and tuple-based policies
- Experience with Auth0 or a comparable identity provider such as Okta, Azure AD, or Keycloak
- Strong backend skills in Java, Ruby, or Python, with frameworks such as Spring Boot, Rails, or Django
- Regular use of AI coding tools such as Claude Code, Cursor, or Codex, with ability to review and validate generated work
- Collaborative approach to technical design and decision-making
- Commitment to building an inclusive team
- Experience building or scaling authorization systems for complex organizational hierarchies or multi-tenant SaaS
- Familiarity with policy-as-code or attribute-based access control
- Background in ad tech or programmatic advertising
- Contributions to open-source identity or authorization projects
What the Team is Saying
Basis Compensation & Benefits Highlights
-
Leave & Time Off Breadth — Policies are described as including flexible/unlimited PTO, year‑round half‑day Fridays, and a paid three‑week sabbatical at tenure milestones. Feedback suggests these practices signal an emphasis on recharge and flexibility beyond standard offerings.
-
Parental & Family Support — Offerings include up to 16 weeks of paid leave for birthing parents, 8 weeks for non‑birthing parents, and adoption/surrogacy support with financial assistance and access to Maven. Feedback suggests the package addresses multiple family‑building paths in a structured way.
-
Retirement Support — The 401(k) program is characterized by a company match (e.g., 50% up to 8%) with immediate vesting in multiple sources. Feedback suggests this structure provides meaningful long‑term savings support.
Basis Insights
What We Do
Basis is a leading global provider of automation software designed specifically for enterprise marketers. Our platform, Basis, is the industry’s only comprehensive digital media solution that seamlessly integrates programmatic, site-direct, advanced TV, search, and social media within a single interface. By unifying these functions, Basis simplifies complex and disconnected media operations, automates repetitive tasks, and minimizes manual processes, enabling marketing teams to focus on strategy and creativity. Our software is built to consolidate various tools and systems, driving productivity while ensuring that advertisers maximize the performance of their multi-channel media investments. With features that streamline workflows and improve efficiency, Basis delivers a powerful solution for optimizing campaign outcomes across multiple channels. Headquartered in Chicago, Basis is recognized not only for our innovative technology but also for our dedication to creating an outstanding workplace culture. Our commitment to our people and our customers underpins everything we do, as we continue to push the boundaries of what's possible in digital marketing automation.
Why Work With Us
Our mission is to make the ad industry better for everyone. We invest in our culture and support our employees – from development opportunities to competitive health and wellness programs. If you’re looking for a community that values your whole self, celebrates your wins, and has your back in challenging times – come change the industry with us.
Gallery
Basis Offices
Remote Workspace
Employees work remotely.
Basis empowers employees to work where they thrive. As a remote-first company, we trust our people to work remotely, AND offer access to our Chicago HQ and shared workspaces across the U.S., ensuring team members are supported where they are.
