Identity Architecture at Vercel
Edge authorization must happen fast. Central database lookups take too long when routing millions of inbound API requests across global points of presence. Vercel identity architecture runs deterministic policy evaluation engines compiled directly to native Rust and WebAssembly targets. Speed matters. Instead of blocking on cross-region network calls, edge nodes verify incoming cryptographic claims locally against signed key rings using rustls and ED25519 signatures. Cache invalidation events broadcast over low-latency message buses. This design drops unauthorized requests immediately before they touch customer compute runtimes.
You work within the platform security team to defend developer accounts, organization roles, and API keys worldwide. The posted base salary ranges from $208,000 to $312,000 USD plus equity.
What You Will Build in Production
- Author deterministic policy engines in Rust compiling to native x86_64/aarch64 and Wasm runtime targets.
- Construct distributed session token verification caches with sub-millisecond evaluation constraints.
- Implement fine-grained role-based access control (RBAC) graphs and audit log primitives across internal Tonic gRPC services.
- Audit cryptographic boundaries, key rotation loops, and public key infrastructures supporting zero-trust deployments.
Candidate Profile
- Extensive programming experience in Rust or Go, with emphasis on systems programming, cryptography, and network protocols.
- Solid understanding of OAuth 2.0, OpenID Connect, SAML 2.0, WebAuthn/Passkeys, and public key cryptography.
- Familiarity with distributed cache invalidation strategies and high-concurrency microservice architectures.
- Salary: $208,000 to $312,000 USD base compensation plus equity grants and comprehensive remote work benefits.
