Fullstack Engineer- Auth Team

Alpaca is a US-headquartered, global leader in agent-first brokerage infrastructure for stocks, ETFs, options, crypto, fixed income, 24/5 trading, and more. Amongst our subsidiaries, Alpaca is a licensed financial services company, serving hundreds of financial institutions across 40 countries with our institutional-grade APIs. This includes broker-dealers, investment advisors, wealth managers, hedge funds, and crypto exchanges, totalling over 10 million brokerage accounts.

Our global team is a diverse group of experienced engineers, traders, and brokerage professionals who are working to achieve our mission of opening financial services to everyone on the planet. We're deeply committed to open-source contributions and fostering a vibrant community, continuously enhancing our award-winning, developer-friendly API and the robust infrastructure behind it. Alpaca is proudly backed by $400 million in funding from top-tier global investors including Portage Ventures, Spark Capital, Tribe Capital, Social Leverage, Horizons Ventures, Opera Tech Ventures, SBI Group, Derayah Financial, Unbound, Peak XV, Elefund, and Y Combinator.

Our Team Members:
We're a dynamic team of 400+ globally distributed members who thrive working from our favorite places around the world, with teammates spanning the USA, Canada, Japan, Hungary, Nigeria, Brazil, the UK, and beyond! We're searching for passionate individuals eager to contribute to Alpaca's rapid growth. If you align with our core values—Stay Curious, Have Empathy, and Be Accountable—and are ready to make a significant impact, we encourage you to apply.

As a Senior Full Stack Engineer on the Platform Team, you will develop and operate Alpaca’s authentication, authorization, and Identity Provider (IdP) systems - the systems that handle user login, access control, and secure access across our APIs, customer products, and internal tools. We are looking for experienced engineers who are comfortable owning services end to end: API design, data modeling, deployments, and production debugging.

Most of your time will be spent writing Go (backend services, gRPC/REST APIs, shared client libraries), with meaningful work in React/Type Script for auth-related UI, and occasionally Java for identity-provider extensions. You will also work with Helm charts, analyze logs and metrics, manage deployments, and help other teams to integrate with our services.

• You have 5+ years of experience writing code in strongly-typed languages, with at least one year of experience in Go.
• You have experience building web applications with React and Type Script.
• You have worked with relational databases before - we use PostgreSQL, but we are not particularly picky about this one as long as you have a solid grasp on the fundamentals.
• You have worked at a startup before - you thrive in ambiguous environments, embrace changing priorities, know when to balance technical debt with speed, and proactively tackle whatever needs to get done without relying on pre-existing processes or documentation.
• You are not afraid of taking a task from start to finish - gathering requirements, figuring out and implementing the best technical solution, then deploying and monitoring the results.
• You have worked at least 3 years on systems at scale.

• You know what a JWT token is, and how OpenID Connect and SAML work.
• Maybe you even heard about Keycloak, or have worked on authentication systems before.
• You have experience with role-based access control.
• You have built or maintained OpenAPI-driven HTTP APIs.
• You are familiar with Kubernetes and Helm.
• You have experience with Java.
• You understand how Kafka works - maybe you even worked with Redpanda before.
• You have experience with…