About the company
Elemynt builds secure AI infrastructure for scientific and engineering R&D teams. Our platform helps organizations connect data, models, compute, and expert workflows in environments where reliability, traceability, and data control matter.
We are building a small, ambitious engineering team across Singapore and the United States to turn advanced scientific computing into production software that real technical teams can use.
Responsibilities
- Build authentication end-to-end: sessions, tokens, service identities, and integration with the customer's existing identity provider (OIDC, SAML, LDAP).
- Design the authorization and tenancy model and own it in code: roles, scopes, policy evaluation, and the tenant isolation that separates one customer's data and workloads from another's.
- Build the admin APIs for organizations, teams, and delegated access, and the middleware every request passes through: rate limits, quotas, and audit logging.
- Implement the safeguards that keep proprietary software and data protected in customer-managed installations: encryption at rest and in transit, secrets and certificate handling, and entitlement enforcement.
- Own the release path: CI/CD pipelines, quality gates, artifact registries, and versioned publishing, so a build that passes the gates is safe to ship.
- Package the platform for heterogeneous customer runtimes, with Helm charts, manifests, CLI installers, and infrastructure-as-code that make installs and upgrades repeatable.
- Operate ephemeral test environments that validate every change against a production-like installation before release.
- Collect usage metrics, logs, and traces from deployed instances, including networks with restricted egress, so deployment health is visible without access to the customer's environment.
- Instrument the platform's own services with the health signals and dashboards that make a deployment supportable and a failure quick to locate.
Requirements
- Bachelor's or Master's degree in Computer Science or a related engineering field, and 6+ years building and shipping production software, with depth in the platform services a product is built on.
- Professional experience with Python as a primary language in production backend systems.
- Production ownership of authentication and authorization: session and token handling, issuance and validation, and a permission model (RBAC or similar) that other services depended on.
- Experience designing multi-tenant systems and the middleware around them: tenant isolation, permission modelling, rate limiting, quotas, and audit logging.
- Direct experience owning a release process other engineers depended on: CI/CD, quality gates, versioned artifacts, and deployment packaging with Kubernetes and Helm.
- A track record of instrumenting production systems and using the metrics, logs, and traces to debug incidents, with Prometheus, Grafana, OpenTelemetry, or equivalents.
- Experience shipping and supporting software in self-hosted, customer-managed, or on-premise installations.
- Experience at an early-stage company owning the trade-offs between scope, speed, and quality.
Nice to have
- License enforcement or entitlement systems, particularly the network license managers common in scientific and HPC software (FlexNet/FLEXlm, RLM).
- Telemetry or product-usage pipelines that report back from self-managed or customer-hosted installations.
- Experience across more than one runtime: cloud Kubernetes alongside HPC schedulers such as Slurm, or bare metal.
- Exposure to scientific computing, simulation, or other large-scale technical workloads.
- Go or Rust alongside Python.
- Time as an early engineer standing up a capability a company didn't previously have.
Conditions
- Location: Singapore or United States. Work model is on site or hybrid, depending on location.