Login

Login

Careers

Senior Software Engineer (Security)

Senior Software Engineer (Security)

Houston, TX

Rust, Windows Authentication, Security, Python

Fulltime

$110K – $150K / year

Apply Now

Allthenticate is changing the way security feels and functions, prioritizing usability to create the most enjoyable experience for our users. Imagine a security product that’s not just necessary but a delight to use. That’s what we live for.

We’re looking for more brilliant people to join our world-class team. Let us know why you are the teammate that we’ve all be dreaming about working with. 🚀

What You’ll Do

You’ll own the deepest, most security-critical parts of Allthenticate: the code that sits between a phone and a computer’s login screen. That means Rust running inside Windows as a credential provider, LSA authentication package, and CNG key storage provider. It means a Python service that talks Bluetooth to phones on Windows, macOS, and Linux. And it means the certificate and identity plumbing that lets an employee sign into an Entra ID joined laptop with nothing but their phone. When a Windows update breaks sign-in, or a customer needs certificate logon to work against their own CA, you’re the one who figures out why and fixes it for good.

Responsibilities

You’ll work across our stack and own some of its hardest problems. Expect to be doing a subset of the following:

  • Building and maintaining our Windows authentication stack in Rust: a credential provider, an LSA authentication package, and a CNG key storage provider

  • Extending Windows sign-in for Entra ID and Active Directory, including certificate-based logon, Kerberos, PKI, and certificate revocation

  • Developing our desktop service, an asyncio Python daemon that brokers authentication between phones and computers over Bluetooth Low Energy

  • Working in our Rust cryptography core, shared with Python through PyO3 and with our Flutter mobile app through flutter_rust_bridge

  • Shipping backend features in FastAPI and Flask, including SAML, OIDC, and WS-Federation identity flows

  • Evolving the protobuf protocol that connects our mobile, desktop, and cloud components

  • Hardening everything you touch through threat modeling, mTLS, and code review with an attacker’s eye

  • Packaging, signing, and testing releases for Windows, macOS, and Linux in CI

What We’re Looking For

  • An insatiable desire to build something awesome

  • Strong systems programming skills in Rust, plus fluency in Python

  • Real experience with Windows internals and authentication, such as Win32 APIs, credential providers, LSA, Kerberos, or smart card logon

  • A solid security background: applied cryptography, PKI and X.509, authentication protocols, and how attackers break them

  • Working knowledge of SAML, OIDC, and enterprise identity providers like Entra ID and Active Directory

  • Hands-on experience using Claude or other AI agents to write, review, and debug code, and good judgment about when to trust them

  • A generalist streak: you’d rather learn the unfamiliar part of the stack than hand the problem to someone else

Ideal Superpowers

  • Windows security development: COM, LSA or SSP packages, CNG providers, or drivers

  • Bluetooth Low Energy on BlueZ, WinRT, or CoreBluetooth

  • Flutter and Dart, or Swift on macOS (CryptoTokenKit, launchd)

  • Implementing FIDO2, WebAuthn, or passkeys

  • Embedded Linux and over-the-air firmware updates

  • A history of CVEs, CTF wins, open-source contributions, or side projects you can’t stop talking about

What You’ll Do

You’ll own the deepest, most security-critical parts of Allthenticate: the code that sits between a phone and a computer’s login screen. That means Rust running inside Windows as a credential provider, LSA authentication package, and CNG key storage provider. It means a Python service that talks Bluetooth to phones on Windows, macOS, and Linux. And it means the certificate and identity plumbing that lets an employee sign into an Entra ID joined laptop with nothing but their phone. When a Windows update breaks sign-in, or a customer needs certificate logon to work against their own CA, you’re the one who figures out why and fixes it for good.

Responsibilities

You’ll work across our stack and own some of its hardest problems. Expect to be doing a subset of the following:

  • Building and maintaining our Windows authentication stack in Rust: a credential provider, an LSA authentication package, and a CNG key storage provider

  • Extending Windows sign-in for Entra ID and Active Directory, including certificate-based logon, Kerberos, PKI, and certificate revocation

  • Developing our desktop service, an asyncio Python daemon that brokers authentication between phones and computers over Bluetooth Low Energy

  • Working in our Rust cryptography core, shared with Python through PyO3 and with our Flutter mobile app through flutter_rust_bridge

  • Shipping backend features in FastAPI and Flask, including SAML, OIDC, and WS-Federation identity flows

  • Evolving the protobuf protocol that connects our mobile, desktop, and cloud components

  • Hardening everything you touch through threat modeling, mTLS, and code review with an attacker’s eye

  • Packaging, signing, and testing releases for Windows, macOS, and Linux in CI

What We’re Looking For

  • An insatiable desire to build something awesome

  • Strong systems programming skills in Rust, plus fluency in Python

  • Real experience with Windows internals and authentication, such as Win32 APIs, credential providers, LSA, Kerberos, or smart card logon

  • A solid security background: applied cryptography, PKI and X.509, authentication protocols, and how attackers break them

  • Working knowledge of SAML, OIDC, and enterprise identity providers like Entra ID and Active Directory

  • Hands-on experience using Claude or other AI agents to write, review, and debug code, and good judgment about when to trust them

  • A generalist streak: you’d rather learn the unfamiliar part of the stack than hand the problem to someone else

Ideal Superpowers

  • Windows security development: COM, LSA or SSP packages, CNG providers, or drivers

  • Bluetooth Low Energy on BlueZ, WinRT, or CoreBluetooth

  • Flutter and Dart, or Swift on macOS (CryptoTokenKit, launchd)

  • Implementing FIDO2, WebAuthn, or passkeys

  • Embedded Linux and over-the-air firmware updates

  • A history of CVEs, CTF wins, open-source contributions, or side projects you can’t stop talking about

Benefits

  • 100% employer covered health, dental and vision insurance

  • Equity grant

  • 401k with company matching

  • Flexible working hours

  • Opportunity to be a major contributor to world-changing technology

  • Work with a fun, inclusive, and accomplished team

  • Vibrant company culture with regular team activities (e.g., team dinners, pickleball, volleyball, escape rooms, and paintball)

What We Offer

If you strive to be the best in the world in your craft then this is the right place for you! You can expect a job that is challenging, fun, and team oriented. While working at Allthenticate, you can expect to always be doing hard things. We are trying to crack one of the hardest problems in Computer Science (secure, usable key management), and nothing about that is easy. We’ll be spending a lot of time together and we want to make sure that every minute of that is as pleasurable as possible. We have regular social outings to make sure we get to know each on a personal level and we are very flexible with hours to do our best to maximize happiness. We are taking on some of the hardest problems on earth -- it’s going to take more than a few smart people -- it takes an elite team.

  • Opportunity to be a major contributor to world-changing technology

  • Work with a fun, inclusive, and accomplished team

  • A culture that values happiness, with flexible hours and regular social outings.

  • Vibrant company culture with regular team activities (e.g., team dinners, soccer, volleyball, escape rooms, and paintball) and a love of hype [buttons]

If you strive to be the best in the world in your craft then this is the right place for you! You can expect a job that is challenging, fun, and team oriented. While working at Allthenticate, you can expect to always be doing hard things. We are trying to crack one of the hardest problems in Computer Science (secure, usable key management), and nothing about that is easy. We’ll be spending a lot of time together and we want to make sure that every minute of that is as pleasurable as possible. We have regular social outings to make sure we get to know each on a personal level and we are very flexible with hours to do our best to maximize happiness. We are taking on some of the hardest problems on earth -- it’s going to take more than a few smart people -- it takes an elite team.

  • Opportunity to be a major contributor to world-changing technology

  • Work with a fun, inclusive, and accomplished team

  • A culture that values happiness, with flexible hours and regular social outings.

  • Vibrant company culture with regular team activities (e.g., team dinners, soccer, volleyball, escape rooms, and paintball) and a love of hype [buttons]

Our Culture

  • User Experience First: We’re dedicated to improving lives with our products.

  • Outcome-Oriented: We’re a results-driven team with a strong performance culture.

  • Innovative: We’re breaking the mold, not conforming to it.

  • Team-Oriented: Collaboration is key; no one works in isolation.

  • Research-Focused: Our company is rooted in rigorous research and continuous learning.

Allthenticate is proud to be an equal opportunity employer. We celebrate diversity and are committed to creating an inclusive environment for all employees.

We do not discriminate on the basis of race, religion, color, national origin, gender, sexual orientation, age, marital status, veteran status, or disability status

Ready to join our mission to make security enjoyable? Apply now and help us build a password-free, key-free, token-free, and breach-free tomorrow.

Apply Now