Description
Vercel Connect helps developers give agents and AI-built apps secure access to the data, tools, and events they need,without wrestling with OAuth, credentials, and integration complexity.
As a senior engineer on this team, you'll own our APIs, token infrastructure, authorization, SDKs, and more, and work with external companies to make it easier for developers to build agents that integrate with their products.
Responsibilities
- Ship provider integrations end to end , auth flows, token exchange, app registration, and the configuration UI , from generic API-key and OAuth presets through bespoke cases like Snowflake Partner Connect, Slack manager apps, and Microsoft Entra.
- Own and improve our infrastructure (uptime, performance, secure storage of credentials and keys) and developer experience for Connect.
- Work with industry leaders within and outside of Vercel to propose and implement new authentication and authorization protocols for AI era.
- Build and harden event forwarding , signature verification inbound, project-scoped identity outbound, delivered to the right deployment and environment.
- Reduce the cost of the next hundred integrations, so most new providers become configuration rather than code.
- Work directly with the teams building on Connect, and turn what you learn into platform improvements.
Requirements
- 6+ years building and operating production backend or full-stack systems, with a track record of owning a service or platform surface rather than a feature.
- Deep, practical understanding of OAuth 2.0/2.1, OIDC, and JWTs , not just wiring up a client library, but reasoning about authorization codes, PKCE, refresh semantics, audience and scope restriction, token exchange, and what each of those actually protects against.
- A security instinct for integration code specifically , SSRF and DNS rebinding, confused-deputy and mix-up attacks, redirect-URI validation, webhook signature verification, tenant isolation.
- Strong TypeScript, and comfort developing backend and frontend components.
- Experience integrating with many third-party APIs, an appetite for the reality of it , undocumented behavior, non-compliant OAuth, inconsistent errors , and the judgment to absorb that mess behind a clean abstraction.
Nice to Have
- You've built or operated an OAuth authorization server, an identity provider, or a multi-tenant integrations platform.
- Prior work on integration marketplaces, partner engineering, or webhook infrastructure at scale.
- Open source contributions, particularly in the auth, Next.js, or agent tooling ecosystems.
Compensation & Benefits
- Competitive compensation package, including equity.
- Inclusive Healthcare Package.
- Learn and Grow - we provide mentorship and send you to events that help you build your network and skills.
- Flexible Time Off.
- We will provide you the gear you need to do your role, and a WFH budget for you to outfit your space as needed.
The San Francisco, CA base pay range for this role is $196,000-$294,000.