Software Engineer - Auth

About Supabase

Supabase is the Postgres development platform, built by developers for developers. We provide a complete backend solution including Database, Auth, Storage, Edge Functions, Realtime, and Vector Search. All services are deeply integrated and designed for growth.

About the Role

Auth, written in Go (server) and with client libraries for TypeScript, SSR, and other frameworks, is one of the most popular products in the Supabase stack. We are seeking an engineer to help us build new and maintain existing Auth features.

Key Responsibilities

• Design and implement secure, scalable authentication features in Go and TypeScript.
• Work across the stack: from server-side protocols to client-side libraries for frameworks like Next.js.
• Own the performance, reliability, and scalability of the Auth server across Supabase's infrastructure.
• Contribute to the evolution of our Auth architecture, including support for OAuth, OIDC, SAML, and other protocols.
• Plan and execute safe database migrations across a large fleet of Postgres instances.
• Build and improve observability: metrics, tracing, alerting, and dashboards to keep the system healthy at scale.
• Write and review RFCs as part of our product development process.
• Collaborate with engineers across Supabase to ensure a seamless experience for developers using our tools.
• Support the community and respond to developer feedback on GitHub, Discord, and other channels.

Qualifications

• Required: 4+ years of professional experience writing and shipping Go in production.
• Required: 2+ years of professional experience working on an authentication system (implementing protocol support, maintenance at scale).
• Required: Strong relational database experience (Postgres or MySQL); Postgres experience is a bonus.
• Strong knowledge of TypeScript in addition to Go (languages used daily).
• Strong knowledge of web technology fundamentals (cookies, sessions, JWT, HTTP, browser APIs).
• Good knowledge of and deep interest in authentication security (passwords, protocols such as OAuth, OIDC or SAML, cryptography fundamentals such as hash functions, signatures, and ciphers).
• Experience working with multiple web frameworks like Next.js (or other SSR alternatives) and traditional frameworks like Ruby on Rails, Django, Laravel, or equivalent.
• Good technical writing skills (RFC process is an important part of making changes to the Auth product).
• Hands-on experience building and operating services at significant scale.
• Deep understanding of systems-level concerns: memory management, concurrency patterns, and compute resource optimization in Go.
• Experience with Kubernetes and AWS (or comparable cloud platform) in a production setting.
• Solid grasp of observability practices — metrics, distributed tracing, structured logging, and alerting (e.g., Prometheus, Grafana, OpenTelemetry).
• Experience managing database schema migrations safely at scale.

What We Offer

• Fully Remote: We hire globally. Work from anywhere with a co-working allowance or WeWork membership.
• ESOP: Equity ownership for every team member to share in the upside.
• Tech Allowance: Budget to set up your ideal work environment (laptop, monitor, headphones, etc.).
• Health Benefits: 100% health insurance coverage for employees and 80% for dependents worldwide.
• Annual Off-Sites: Gathering once a year in a new city for connection and collaboration.
• Flexible Work: Asynchronous operation trusting you to manage your own schedule.
• Professional Development: Annual education allowance for courses, books, conferences, and growth.

About the Team

Supabase was born remote and open-source-first. We are a globally distributed team of ~400 team members across 60+ countries and 540,000+ community members. We move fast, build in public, and support the open-source ecosystem.