Staff Software Engineer, Identity and Access Management

About Owner

Owner is the AI-native system local business owners use to succeed, starting with restaurants.

We’re building the system that replaces the many tools owners use to run their business.

It powers everything from the restaurant’s website, online ordering, CRM, POS, and more.

Product philosophy

Most small business software makes owners do the work to get what they want: sales growth and profit growth. Owner does the work for them agentically.

Our system drives demand, converts it, and helps operators run their business day to day. As it improves, the business improves with it.

Using Owner should feel like having a team of great operators, engineers, and marketers working for you.

Our vision

We’re starting by helping independent restaurants succeed online.

But it’s not just restaurants that need our help. Most local businesses are struggling with these same problems. Huge technology corporations are taking their customers, bleeding their profits, and making it hard for them to survive.

Once we nail the solution for restaurants – we’ll scale it into every other local business type.

In the future we envision, tens of millions of local business owners will use our technology to succeed in the digital age.

Our traction

Since 2020, we've generated tens of millions in revenue and processed over a billion dollars of online orders. 1 in 5 Americans have used an website.

More importantly, we’ve helped over 20,000 restaurant owners, and saved them nearly $200 million in fees.

Our team

Our team is now in the low hundreds. We’ve got top talent from the most successful companies in SMB software, including: Shopify, HubSpot, DoorDash, ServiceTitan, Rappi, Faire and Stripe.

We’ll be scaling even faster in 2026 to keep pace with our customer growth.

Where we work

Owner is a remote-first, global company headquartered in San Francisco, with a sales hub in Toronto. For a few of our roles we prioritize in-person collaboration at one of our office locations. Most of our teammates are distributed throughout the globe. Please review the role description and discuss with your recruiter for more details on location!

Why we're looking for you

At Owner, authentication and authorization sit at the center of trust. Every restaurant owner, employee, partner, and internal teammate depends on secure, reliable access to the right tools at the right time — whether they’re ringing up orders, balancing the books, or supporting customers behind the scenes.

We’re building the next generation of our identity and access platform, and we need an exceptional engineer to help us get there. You’ll join a small, high-trust team with direct ownership over login, session management, permissions, roles, service-to-service auth, and the APIs and infrastructure every product team at Owner builds on top of. This is a rare opportunity to shape a foundational security platform at a fast-growing company — one that has to scale with our product surface, our customer base, and the complexity of the restaurants we serve.

This role is 100% remote and can be based anywhere in the United States or Canada.

The impact you'll have

• Help build the foundation for secure access at Owner — design and improve the authentication and authorization systems that power every product surface across the platform.

• Own critical auth infrastructure end to end — contribute to systems for login, sessions, token management, service-to-service auth, account security, and access enforcement.

• Improve reliability and observability — instrument auth services with the alerting, dashboards, and runbooks needed to detect issues quickly and keep critical access flows healthy.

• Raise the security bar — identify risks, improve controls, and help ensure authentication and authorization are designed thoughtfully from the beginning, not added as an afterthought.

• Leverage AI tools to move faster — use AI tooling to accelerate your work, from writing and reviewing code to exploring solutions and automating repetitive tasks.

• Help us build a great team — interview candidates, share technical context, and raise the bar for how we build.

Who you’ll work with

• A small, focused authentication and authorization team — you’ll work closely with a tight-knit group of engineers who own identity and access end to end.

• Engineers across product, platform, infrastructure, and security — auth is a foundation every team depends on, so you’ll partner closely on APIs, access patterns, and implementation standards.

• Product and Design — to ensure access flows are secure, intuitive, and aligned with the needs of restaurants and internal teams.

Minimum requirements

• 8+ years of experience building and shipping production backend systems, with a track record of owning critical services end to end — not just contributing to them.

• Comfort with Typescript or Javascript — with deep experience in building web-scale applications.

• Hands-on experience building authentication, authorization, identity, permissions, security, or similar platform infrastructure.

• Strong understanding of API design, distributed systems, databases, and operational reliability.

• Strong sense of ownership and urgency — you don’t wait for perfect requirements, you drive toward clarity and keep things moving.

Compensation and benefits

• The estimated starting base salary range for this role is $220K-$240K depending on level, location and experience, plus a generous pre-IPO equity package

• Other benefits include comprehensive health coverage, work from anywhere (remote-first workplace), unlimited PTO - plus extra fun perks!

Notice - Employment Scams

Communication from our team regarding job opportunities will only be made by an Owner team member with an @owner.com email address.

We do not conduct interviews over email or chat platforms, and we will never ask you to provide personal or financial information such as your mailing address, social security number, credit card numbers or banking information. If you believe you are being contacted by a scammer, please mark the communication as "phishing" or “spam” and do not respond.

#LI-AB1