Software Engineer

Senior Software Engineer (Passkeys)

Bitwarden promotes better internet security and safety with the leading open source password management solution for individuals, teams, and business organizations. Our philosophy on security is that “we are all in this together” – we continue to offer a full-featured free version of Bitwarden so that everyone can be protected with strong password management. We also provide enterprise-grade solutions to some of the largest companies in the world, and will continue to innovate in the identity and authentication market as the world starts to grow beyond passwords. Read more on the Bitwarden blog. 

As a Senior Engineer on the Passkeys team, you will build the technology taking the world beyond passwords. Bitwarden is a credential provider across browser, desktop, and mobile, and the Passkeys team owns our implementation of WebAuthn and FIDO2 — creating and asserting credentials, integrating with each platform's credential provider APIs, and the emerging standards for moving credentials between providers so that users are never locked in.

This is a low-level, cross-platform engineering role. The work is written primarily in Rust, in the shared SDK consumed by every Bitwarden client, where you will implement specifications requiring a robust attention to detail -  a subtle misreading of the requirements produces edge-case user login errors in certain use cases. The WebAuthn and passkey space is constantly evolving as well, so you will be responsible for understanding how the specification is changing, how our credentials are being used on client sites, and how to adapt to these changes in our core SDK.

RESPONSIBILITIES

• Design, build, and maintain Bitwarden's implementation of the WebAuthn and FIDO2 standards, including credential creation, assertion, and storage within an end-to-end encrypted vault
• Integrate our passkey implementation with each platform's credential provider surface across Bitwarden's clients
• Implement and help shape emerging standards for credential portability and secure import and export between providers
• Build the interoperability testing that keeps our implementation correct against the long tail of relying parties, browsers, and platforms our users encounter in the real world
• Become an expert on the Bitwarden APIs and the cryptographic and architectural constraints of a zero-knowledge product
• Participate in code reviews, learning, and spreading technical knowledge
• Independently plan, estimate, and deliver new feature work and bug fixes
• Occasionally review & approve bug fixes submitted by the user community

WHAT YOU BRING TO BITWARDEN

• Deep working knowledge of WebAuthn and the FIDO2/CTAP stack