1 match
Staff-level security engineering role building and running the security program for Keycard's product, infrastructure, and published artifacts, mostly as code. Work includes threat modeling token exchange, delegation, and the MCP gateway, running scoped agents against isolated instances, and turning confirmed failures into CI regressions. The role also covers cloud accounts, pipelines, secrets, and incident response.
About Keycard
At Keycard, we're building identity and access infrastructure for the agent-native era, where software isn't static but a dynamic, constantly changing system of AI agents working on behalf of people and businesses. Keycard gives every agent a verified identity and issues short-lived, task-scoped credentials at runtime, so agents can only do what they were asked to do, and every action is fully auditable. We're backed by a16z, Boldstart, and Acrew, and our founding team built and scaled Snyk, Auth0, HashiCorp, and Heroku.
We're hiring a staff-level Software Engineer, Security. This is a software engineering role: you'll build and run the security program for what Keycard ships and runs, across our product, our infrastructure, and what we publish, mostly as code and automation. Security is everyone's job here. You'd be the first engineer whose whole job is security, working with engineers who already know the field. It matters because security is what we sell: a hole in our token exchange or policy checks hands a customer's agent access nobody granted. You find those holes early and build the tooling that catches the next ones.
Keycard is a control plane for agents: identity, credential exchange, delegation, policy, and audit. It has to hold even when the agent itself is compromised. Agents are part of how we build, and part of how you'll do this job.
You'll also secure Keycard itself: our cloud accounts, customer-hosted deployments, our pipeline, and secrets. You set the controls and run security response. Platform engineering runs the infrastructure; operations handles audits and customer reviews. You prioritize product and company security work by risk to customers and Keycard.
What We Offer
