• Collaborate with your pod — a small, focused team of full-stack engineers — to build and maintain IAM capabilities • Contribute to backend and frontend codebases with an eye toward reliability, scalability, and security • Participate in technical design discussions and help break down projects into clear, actionable tasks • Identify and suggest improvements to our authentication and authorization flows • Help support the maintenance and uptime of IAM systems, including investigating and resolving production issues • Work closely with product, security, and legal stakeholders to ensure compliance and integrity of user data and access • Stay informed on evolving security practices, frameworks, and technologies

• Own technical strategy — Define the architecture for Identity's core systems (Identity Store, headless verification platform, fraud detection infrastructure), make build-vs-buy-vs-partner decisions, and surface technical risks before they become customer-facing failures • Lead 0-1 platform development — Architect net-new systems including the Identity Store, Networked Identity platform, and advanced fraud detection pipeline (behavioral biometrics, deepfake discriminators, adversarial training). Drive the evolution from a hosted-UI product to a headless-API and embedded-components platform • Drive cross-functional alignment — Be the primary technical voice in roadmap and resourcing discussions. Partner with ML, product, legal, and engineering leads across Risk, Fraud, Link, Connect, and Crypto to ensure Identity's abstractions serve the full breadth of Stripe's product surface • Raise the technical bar — Set engineering standards across ML, backend, mobile, and front-end; lead design reviews; and mentor senior engineers on the judgment needed to operate a high-stakes, externally-facing product • Operate with ownership — Be accountable for reliability, scalability, and security of the systems you design — including the observability and alerting that catch model drift and fraud pattern shifts before customers do

• Responsible for end-to-end technical migration workflow for transitioning templates to LLM autoraters. • Use internal tools to leverage prompt engineering techniques to maximize model performance. • Utilize Automatic Prompt Generation (APG) tools to create baseline prompts for complex parent-child template clusters. • Run and supervise Automated Prompt Optimization (APO) tool, reviewing outputs and flagging when the APO reaches deadlocks or plateaus. • Manually draft, test, and refine prompts to navigate complex template architectures, overcome anti-patterns, and handle edge cases. • Monitor shadowbot runs to ensure sufficient disagreements between human and LLM ratings are registered, generated, and tracked. • Run prompt versions against established gold data to continuously measure autorater quality, calculating accuracy metrics such as F1 scores, precision, and recall. • Draft technical launch readiness justifications (Launch Certification Documentation) for final.

• Design and ship secure MCP (Model Context Protocol) connectors to Extend's internal systems and the third-party SaaS we run on: finance, CRM, data warehouse, expense management, product analytics, support, ATS, and the long tail beyond. • Build and curate the shared library of agent skills that every team at Extend composes from. Ship skills, codify patterns, and raise the floor for what a safe, high-quality skill looks like. • Extend our agent infrastructure. Build the tooling that lets non-engineers create reusable agent skills securely and reliably. Encode the review and publishing model for shared tooling, shared runtimes, and the feedback loop on agent behavior in production. Fill the open phases of the lifecycle that governs how skills are designed, reviewed, and shipped, so non-engineers can build and ship intelligent automation end to end. • Build toward a connector-building agent: a meta-agent that discovers APIs, scaffolds MCP servers, and provisions access automatically. The end state is a platform that is itself an agent. • Work with our platform teams to establish the credential scoping, OpenTelemetry instrumentation, and least-privilege patterns that every connector and skill ships with, so security is built in from day one. • Own the employee experience for the agentic platform. Help onboard employees to the tools with self-serve guides, build skills people can learn from, and run the feedback loop between what's shipped and what adopters actually need. Your job isn't done when the connector ships. It's done when the team using it is self-sufficient. • Design credential scoping and vending for agent connectors: how API keys are provisioned, rotated, and scoped per user, per skill, per connector. OAuth/OIDC where it fits, least-privilege everywhere. • Build the risk-tier and review model for shared agent skills: what's safe at personal, team, and org level; sandboxing strategy; malicious dependency scanning for skills that pull in untrusted packages. • Instrument the agent platform end-to-end with OpenTelemetry: every MCP call, every skill execution, every credential use is visible in Coralogix.