Software Engineer, Applications

Build and maintain authentication and fine-grained authorization systems using Auth0 and OpenFGA. Own OAuth 2.0 and OpenID Connect implementations, identity federation, token flows, and permissions for AI agents. Lead cross-team technical projects, set engineering standards, review code, and mentor engineers. The role requires strong backend development skills and experience with identity providers, ReBAC systems, and complex multi-tenant authorization models. The summary above was generated by AI WHO WE ARE At Basis, we empower agencies and brands with cutting-edge software that automates digital media operations. Our all-in-one platform supports seamless planning, reporting, and financial reconciliation across direct, programmatic, search, and social media. We’re not just building advanced technology; we’re also building a culture where passionate, motivated individuals come together to drive meaningful change. Our commitment to inclusivity and growth ensures our employees thrive both professionally and personally. With our headquarters in Chicago, we offer flexible work options across the U.S. and Canada, including remote, hybrid, or on-site at headquarters.

ABOUT THE TEAM

The Auth team owns the systems that decide who can do what across Basis: authentication, identity, and fine-grained authorization for a platform built on complex agency and org hierarchies. We’re an enabling team: every product team at Basis depends on the primitives, policies, and infrastructure we build and own. That now includes authorization for AI agents operating alongside human users, not just human users alone.

WHAT YOU’LL DO

• Extend our identity layer in Auth0: authentication flows, token issuance, identity federation.
• Build and maintain our ReBAC authorization model in OpenFGA, the system every authorization decision on the platform runs through.
• Own the details of OAuth 2.0 and OIDC in our stack: token flows, JWKS validation, scopes, audience restrictions.
• Define how AI agents authenticate and receive scoped permissions, so non-human actors operate under the same authorization model as people.
• Drive technical projects that cut across multiple teams and systems, from design through production.
• Set technical direction and quality standards for the team and review the work that ships against them.
• Support and mentor other engineers through code review, design discussions, and day-to-day collaboration., Provides administrative, operational, and program support for employee experience, engagement, and business partner teams. Responsibilities include responding to employee and manager questions, coordinating lifecycle processes, maintaining Workday transactions and records, supporting performance and talent programs, analyzing employee feedback, and administering culture, recognition, mentorship, and engagement initiatives. The role also supports communications, events, reporting, scheduling, and cross-functional talent programs while handling sensitive information with discretion., Lead the technical direction, architecture, and development of Compass, an LLM-powered agent platform. Design multi-agent systems, MCP and A2A integrations, orchestration, evaluation, and observability infrastructure. Drive cross-team technical projects, production support, engineering quality, mentoring, and adoption of AI-assisted development practices. Partner with Product, QA, Design, Operations, and Engineering stakeholders to deliver reliable agentic systems. Top Skills: A2AAg-UiAmazon S3AWSAws BedrockBedrock AgentcoreFastapiFastmcpLangchainLangfuseLanggraphMcpOauth 2.0PythonRagRest ApisSnowflakeVector Databases Basis

• 5+ years of professional software engineering experience.
• Deep, hands-on knowledge of OAuth 2.0 and OpenID.
• Experience with ReBAC systems (OpenFGA, Zanzibar, SpiceDB): modeling schemas, writing and testing tuple-based policies, and reasoning about permission evaluation performance.
• Experience with Auth0 or a comparable identity provider (Okta, Azure AD, Keycloak).
• Strong backend skills in Java, Ruby, or Python, with frameworks such as Spring Boot, Rails, or Django.
• Regular use of AI coding tools (Claude Code, Cursor, Codex) for code generation, debugging, and exploring unfamiliar code, and the judgment to own and vet what they produce.
• A collaborative approach to design and decision-making, and a commitment to building an inclusive team.

BONUS POINTS

• Experience building or scaling auth systems for a platform with complex organizational hierarchies (agencies, multi-tenant SaaS, etc.).
• Familiarity with policy-as-code or attribute-based access control (ABAC).
• Background in ad tech or programmatic advertising.
• Contributions to open-source identity or authorization projects.

OUR TECH STACK

• Languages: Ruby, JavaScript, Java
• Auth & Identity: Auth0, OpenFGA
• Infrastructure: AWS, Docker, Kubernetes
• Data: PostgreSQL, Redis
• Frameworks & Tools: Spring Boot, Rails, Node.js, React, RabbitMQ, Sidekiq

At Basis, integrity is at the core of how we hire. To protect our candidates and our company, we verify identity, education, and employment history for all hires. Some roles may also require onsite or in-person interviews as part of the process. Any misrepresentation of identity, experience, or skills may result in removal from the hiring process or termination of employment. We value transparency and authenticity and expect the same from every applicant. Anything Else? Don’t have every skill listed? No problem! We know experience can be built in many ways. If you have relevant skills that aren’t reflected in your resume, we encourage you to share them in an optional cover letter. Life With Basis We’re committed to our people’s growth and well-being because our success is tied to theirs. That’s why we’ve earned recognition as a top workplace, including: Ad Age, #1 Best Places to Work, WorkLife’s #1 Most Committed to Work Life Balance, and the Chicago Tribune’s Top Workplaces in Chicago. We offer competitive perks, including a flexible work week, 401k/RRSP matching, mental health support, paid sabbaticals, generous parental leave, flexible work options, and more. Basis is proud to be an equal-opportunity employer. We celebrate all team members regardless of gender identity, sexual orientation, race or cultural background, religion, disability, age, and beyond., United States Easy Apply 77K-94K Annually Senior level 77K-94K Annually Senior level AdTech * Digital Media * Marketing Tech * Software * Automation Develops and presents integrated media strategies for brand and agency clients, oversees media planning quality, negotiates vendor inventory and pricing, manages insertion orders and campaign budgets, and ensures KPI delivery. Partners with research, analytics, ad operations, finance, and sales teams to execute campaigns, resolve issues, improve client satisfaction, and retain accounts. Mentors junior planners and provides clients with insights on digital advertising trends and innovation. Top Skills: DatoramaDemand-Side Platforms (Dsps)Digital MediaMedia Planning ToolsExcelMicrosoft PowerpointProgrammatic MediaReal-Time BiddingSyndicated Research ToolsThird-Party Ad Servers

What you need to know about the Colorado Tech Scene

With a business-friendly climate and research universities like CU Boulder and Colorado State, Colorado has made a name for itself as a startup ecosystem. The state boasts a skilled workforce and high quality of life thanks to its affordable housing, vibrant cultural scene and unparalleled opportunities for outdoor recreation. Colorado is also home to the National Renewable Energy Laboratory, helping cement its status as a hub for renewable energy innovation.

Key Facts About Colorado Tech

• Number of Tech Workers: 260,000; 8.5% of overall workforce (2024 CompTIA survey)
• Major Tech Employers: Lockheed Martin, Century Link, Comcast, BAE Systems, Level 3
• Key Industries: Software, artificial intelligence, aerospace, e-commerce, fintech, healthtech
• Funding Landscape: $4.9 billion in VC funding in 2024 (Pitchbook)
• Notable Investors: Access Venture Partners, Ridgeline Ventures, Techstars, Blackhorn Ventures
• Research Centers and Universities: Colorado School of Mines, University of Colorado Boulder, University of Denver, Colorado State University, Mesa Laboratory, Space Science Institute, National Center for Atmospheric Research, National Renewable Energy Laboratory, Gottlieb Institute