About Keycard

At Keycard, we're building identity and access infrastructure for the agent-native era, where software isn't static but a dynamic, constantly changing system of AI agents working on behalf of people and businesses. Keycard gives every agent a verified identity and issues short-lived, task-scoped credentials at runtime, so agents can only do what they were asked to do, and every action is fully auditable. We're backed by a16z, Boldstart, and Acrew, and our founding team built and scaled Snyk, Auth0, HashiCorp, and Heroku.

The Role

We're hiring a staff-level Software Engineer, Security. This is a software engineering job: you'll write, review, and maintain production code in our token service, policy engine, and gateway. You'd be the first engineer whose whole job is security, working with engineers who already know the field. A full-time security seat matters because security is what we sell: a hole in our token exchange or policy checks hands a customer's agent access nobody granted. You find those holes first and fix them with the team.

Keycard is a control plane for agents: identity, credential exchange, delegation, policy, and audit. It has to hold even when the agent itself is compromised. Agents are part of how we build, and part of how you'll do this job.

You'll also secure Keycard itself