Software Engineer, Identiy & Access

You'll own the identity layer that powers every Lovable app, designing and building the Apps Platform's identity and access management system. This is a high-trust, high-impact role at the intersection of security, product, and platform engineering.

Requirements

• Design and build the Apps Platform's identity and access management system
• Implement authentication flows: OAuth 2.0/OIDC, magic links, social login providers, MFA, and session management
• Build a robust authorization model: RBAC, row-level security, API key management, and fine-grained permissions
• Own multi-tenancy isolation — ensuring that user apps, data, and credentials are securely separated
• Manage secrets infrastructure: secure storage, rotation, and access control for database credentials, API keys, and service tokens
• Migrate identity services from the current bundled setup to a fully owned, composable identity layer without breaking user sessions
• Operate auth as a production service: monitoring, alerting, incident response, and capacity planning for a system on the critical path of every request
• Collaborate with the AI and product teams to ensure that generated apps get secure-by-default auth without requiring user expertise