No open role today. We read everything.
Obexal builds a sovereign European identity provider, for people and for AI agents. We hire sparingly, but every serious spontaneous application gets a serious answer.
What we value
Three principles guide how we build and how we hire.
Sovereignty by design
Designed and hosted in the EU, with no non-EU dependency and self-hosted fonts (no external CDN). We build for GDPR and for customers who need to keep control of their data.
Security is the product
Password policy aligned with NIST, passkeys and WebAuthn, step-up MFA, conditional access as versioned policy-as-code. Security is not a feature we add later, it is the thing we ship.
Rigour over hype
Open standards (OIDC, OAuth 2.1, SAML 2.0, SCIM 2.0), a documented OpenAPI surface, a real-time audit stream. A fact beats an adjective, in our product and in our meetings.
How we work
A small team on a serious problem
We give AI agents a real identity: per-agent credentials via OAuth 2.1 client credentials, scope and duration ceilings, fail-closed policy, anomaly detection and a kill switch. It is a hard problem and we treat it that way.
- Ownership: you ship features end to end, from spec to audit log
- Written first: we think in specs and OpenAPI before code
- Evidence culture: decisions are backed by facts, not seniority
- Team based in France: remote work and practical details are discussed case by case
- Stack
- Go (auth service), TypeScript (console and portal), PostgreSQL, Redis
- Infrastructure
- Self-hosted in France, Paris region
- Standards
- OIDC, OAuth 2.1, SAML 2.0, SCIM 2.0
- Location
- France; remote work case by case
A useful spontaneous application
No form, no applicant tracking system. Three things make an application stand out.
Show something real
A running project, readable code or a technical write-up. A concrete link beats a generic cover letter.
Write to us
To contact@obexal.com, through the contact page. Tell us what you would build at Obexal and why identity interests you.
Get an answer
We reply to every application within a few business days, directly, with no robot and no template.
Does the problem speak to you?
Send a spontaneous application: we read everything and we answer fast.