Spruce lets users control their data across the web. Instead of users logging into platforms, we believe platforms should request to access data vaults controlled by users.

The demand for trusted digital ID is accelerating as AI deepfakes begin to destroy most of the ways we use to verify identity today. How private or secure is it to hold your driver's license or passport up to a webcam to get a bank account? Was it ever private or secure? Stable diffusion can break so much of this already. Society will need trusted digital IDs and credentials. Our mission is to allow them to be controlled by individuals, with safeguards to prevent descents into surveillance states and checkpoint societies.

We are the main implementers of category-defining initiatives such as the digital ID program for the California DMV, and the verifiable digital credentials program in Utah. We are private sector participants in NIST's National Cyber Security of Excellence initiative for privacy-preserving digital ID.

We are hiring skilled engineers who care about making a real impact in improving public services, digital autonomy, and user privacy for the world. We work closely with public sector agencies, and have high regard for public servants. We have a strong engineering and customer-oriented culture, and are not simply a SaaS product or AI wrapper. Our roles are not for the faint of heart: you will be expected to work hard and learn a lot in this role.

Our engineers are ambitious to get outcomes for our customers and their constituents. On any given day, they may write great Rust/C#/TypeScript, deal with mainframe dumps, read policy documents, respond to technical RFIs/RFPs, manage on-prem environments, implement new NFC + Bluetooth protocols in Swift/Kotlin, create CI/CD processes that enforce W3C accessibility guidelines and i18n requirements, rewrite lost specs from disassembled binaries, figure out stablecoin payments, and design new protections for public key infrastructure. It is a team effort, and people with T-shirt shaped skills are able to collaborate and learn a ton from each other every day.

We are interested in candidates who want to be proud of the meaningful impact they make for society, even if it takes time to get right. This is not the right job for someone who wants to "join a cool new AI startup" that implodes or exits in under a year.

See our roles here: https://jobs.ashbyhq.com/spruceid

https://datatracker.ietf.org/doc/html/rfc9449#name-dpop-proo...

    The JWT specification itself is not trusted by security experts. This should preclude all usage of them for anything related to security and authentication. 

Spruce lets users control their data across the web. Instead of users logging into platforms, we believe platforms should request to access data vaults controlled by users.

The demand for trusted digital ID is accelerating as AI deepfakes begin to destroy most of the ways we use to verify identity today. How private or secure is it to hold your driver's license or passport up to a webcam to get a bank account? Was it ever private or secure? Stable diffusion can break so much of this already. Society will need trusted digital IDs and credentials. Our mission is to allow them to be controlled by individuals, with safeguards to prevent descents into surveillance states and checkpoint societies.

We are the main implementers of category-defining initiatives such as the digital ID program for the California DMV, and the verifiable digital credentials program in Utah. We are private sector participants in NIST's National Cyber Security of Excellence initiative for privacy-preserving digital ID.

We are hiring skilled engineers who care about making a real impact in improving public services, digital autonomy, and user privacy for the world. We work closely with public sector agencies, and have high regard for public servants. We have a strong engineering and customer-oriented culture, and are not simply a SaaS product or AI wrapper. Our roles are not for the faint of heart: you will be expected to work hard and learn a lot in this role.

Our engineers are ambitious to get outcomes for our customers and their constituents. On any given day, they may write great Rust/C#/TypeScript, deal with mainframe dumps, read policy documents, respond to technical RFIs/RFPs, manage on-prem environments, implement new NFC + Bluetooth protocols in Swift/Kotlin, create CI/CD processes that enforce W3C accessibility guidelines and i18n requirements, rewrite lost specs from disassembled binaries, figure out stablecoin payments, and design new protections for public key infrastructure. It is a team effort, and people with T-shirt shaped skills are able to collaborate and learn a ton from each other every day.

We are interested in candidates who want to be proud of the meaningful impact they make for society, even if it takes time to get right. This is not the right job for someone who wants to "join a cool new AI startup" that implodes or exits in under a year.

See our roles here: https://jobs.ashbyhq.com/spruceid

  > A 16-year-old with no credentials and no capital could just do things. The world of bits offered the freedom to build without being drowned in arbitrary constraints, in a way that didn’t require assembling vast capital or prestige or connections, where your creativity and work could speak for itself, and you had agency.

Spruce lets users control their data across the web. Instead of users logging into platforms, we believe platforms should request to access data vaults controlled by users.

The demand for trusted digital ID is accelerating as AI deepfakes begin to destroy most of the ways we use to verify identity today. How private or secure is it to hold your driver's license or passport up to a webcam to get a bank account? Was it ever private or secure? Stable diffusion can break so much of this already. Society will need trusted digital IDs and credentials. Our mission is to allow them to be controlled by individuals, with safeguards to prevent descents into surveillance states and checkpoint societies.

We are the main implementers of category-defining initiatives such as the digital ID program for the California DMV, and the verifiable digital credentials program in Utah. We are private sector participants in NIST's National Cyber Security of Excellence initiative for privacy-preserving digital ID.

We are hiring skilled engineers who care about making a real impact in improving public services, digital autonomy, and user privacy for the world. We work closely with public sector agencies, and have high regard for public servants. We have a strong engineering and customer-oriented culture, and are not simply a SaaS product or AI wrapper. Our roles are not for the faint of heart: you will be expected to work hard and learn a lot in this role.

Our engineers are ambitious to get outcomes for our customers and their constituents. On any given day, they may write great Rust/C#/TypeScript, deal with mainframe dumps, read policy documents, respond to technical RFIs/RFPs, manage on-prem environments, implement new NFC + Bluetooth protocols in Swift/Kotlin, create CI/CD processes that enforce W3C accessibility guidelines and i18n requirements, rewrite lost specs from disassembled binaries, figure out stablecoin payments, and design new protections for public key infrastructure. It is a team effort, and people with T-shirt shaped skills are able to collaborate and learn a ton from each other every day.

We are interested in candidates who want to be proud of the meaningful impact they make for society, even if it takes time to get right. This is not the right job for someone who wants to "join a cool new AI startup" that implodes or exits in under a year.

See our roles here: https://jobs.ashbyhq.com/spruceid

Spruce lets users control their data across the web. Instead of users logging into platforms, we believe platforms should request to access data vaults controlled by users.

The demand for trusted digital ID is accelerating as AI deepfakes begin to destroy most of the ways we use to verify identity today. How private or secure is it to hold your driver's license or passport up to a webcam to get a bank account? Was it ever private or secure? Stable diffusion can break so much of this already. Society will need trusted digital IDs and credentials. Our mission is to allow them to be controlled by individuals, with safeguards to prevent descents into surveillance states and checkpoint societies.

We are the main implementers of category-defining initiatives such as the digital ID program for the California DMV, and the verifiable digital credentials program in Utah. We are private sector participants in NIST's National Cyber Security of Excellence initiative for privacy-preserving digital ID.

We are hiring skilled engineers who care about making a real impact in improving public services, digital autonomy, and user privacy for the world. We work closely with public sector agencies, and have high regard for public servants. We have a strong engineering and customer-oriented culture, and are not simply a SaaS product or AI wrapper. Our roles are not for the faint of heart: you will be expected to work hard and learn a lot in this role.

Our engineers are ambitious to get outcomes for our customers and their constituents. On any given day, they may write great Rust/C#/TypeScript, deal with mainframe dumps, read policy documents, respond to technical RFIs/RFPs, manage on-prem environments, implement new NFC + Bluetooth protocols in Swift/Kotlin, create CI/CD processes that enforce W3C accessibility guidelines and i18n requirements, rewrite lost specs from disassembled binaries, figure out stablecoin payments, and design new protections for public key infrastructure. It is a team effort, and people with T-shirt shaped skills are able to collaborate and learn a ton from each other every day.

We are interested in candidates who want to be proud of the meaningful impact they make for society, even if it takes time to get right. This is not the right job for someone who wants to "join a cool new AI startup" that implodes or exits in under a year.

See our roles here: https://jobs.lever.co/sprucesystems/

[NEW ROLE FOR EXCEPTIONAL NEW GRADS OPEN]

Spruce lets users control their data across the web. Instead of users logging into platforms, we believe platforms should request to access data vaults controlled by users.

The demand for trusted digital ID is accelerating as AI deepfakes begin to destroy most of the ways we use to verify identity today. How private or secure is it to hold your driver's license or passport up to a webcam to get a bank account? Was it ever private or secure? Stable diffusion can break so much of this already. Society will need trusted digital IDs and credentials. Our mission is to allow them to be controlled by individuals, with safeguards to prevent descents into surveillance states and checkpoint societies.

We are the main implementers of category-defining initiatives such as the digital ID program for the California DMV, and the verifiable digital credentials program in Utah. We are private sector participants in NIST's National Cyber Security of Excellence initiative for privacy-preserving digital ID.

We are hiring skilled engineers who care about making a real impact in improving public services, digital autonomy, and user privacy for the world. We work closely with public sector agencies, and have high regard for public servants. We have a strong engineering and customer-oriented culture, and are not simply a SaaS product or AI wrapper. Our roles are not for the faint of heart: you will be expected to work hard and learn a lot in this role.

Our engineers are ambitious to get outcomes for our customers and their constituents. On any given day, they may write great Rust/C#/TypeScript, deal with mainframe dumps, read policy documents, respond to technical RFIs/RFPs, manage on-prem environments, implement new NFC + Bluetooth protocols in Swift/Kotlin, create CI/CD processes that enforce W3C accessibility guidelines and i18n requirements, rewrite lost specs from disassembled binaries, figure out stablecoin payments, and design new protections for public key infrastructure. It is a team effort, and people with T-shirt shaped skills are able to collaborate and learn a ton from each other every day.

We are interested in candidates who want to be proud of the meaningful impact they make for society, even if it takes time to get right. This is not the right job for someone who wants to "join a cool new AI startup" that implodes or exits in under a year.

See our roles here: https://jobs.lever.co/sprucesystems/

Spruce lets users control their data across the web. Instead of users logging into platforms, we believe platforms should request to access data vaults controlled by users.

The demand for trusted digital ID is accelerating as AI deepfakes begin to destroy most of the ways we use to verify identity today. How private or secure is it to hold your driver's license or passport up to a webcam to get a bank account? Was it ever private or secure? Stable diffusion can break so much of this already. Society will need trusted digital IDs and credentials. Our mission is to allow them to be controlled by individuals, with safeguards to prevent descents into surveillance states and checkpoint societies.

We are the main implementers of category-defining initiatives such as the digital ID program for the California DMV, and the verifiable digital credentials program in Utah. We are private sector participants in NIST's National Cyber Security of Excellence initiative for privacy-preserving digital ID.

We are hiring skilled engineers who care about making a real impact in improving public services, digital autonomy, and user privacy for the world. We work closely with public sector agencies, and have high regard for public servants. We have a strong engineering and customer-oriented culture, and are not simply a SaaS product or AI wrapper. Our roles are not for the faint of heart: you will be expected to work hard and learn a lot in this role.

Our engineers are ambitious to get outcomes for our customers and their constituents. On any given day, they may write great Rust/C#/TypeScript, deal with mainframe dumps, read policy documents, respond to technical RFIs/RFPs, manage on-prem environments, implement new NFC + Bluetooth protocols in Swift/Kotlin, create CI/CD processes that enforce W3C accessibility guidelines and i18n requirements, rewrite lost specs from disassembled binaries, figure out stablecoin payments, and design new protections for public key infrastructure. It is a team effort, and people with T-shirt shaped skills are able to collaborate and learn a ton from each other every day.

We are interested in candidates who want to be proud of the meaningful impact they make for society, even if it takes time to get right. This is not the right job for someone who wants to "join a cool new AI startup" that implodes or exits in under a year.

See our roles here: https://jobs.lever.co/sprucesystems/

Spruce lets users control their data across the web. Instead of users logging into platforms, we believe platforms should request to access data vaults controlled by users.

The demand for trusted digital ID is accelerating as AI deepfakes begin to destroy most of the ways we use to verify identity today. How private or secure is it to hold your driver's license or passport up to a webcam to get a bank account? Was it ever private or secure? Stable diffusion can break so much of this already. Society will need trusted digital IDs and credentials. Our mission is to allow them to be controlled by individuals, with safeguards to prevent descents into surveillance states and checkpoint societies.

We are the main implementers of category-defining initiatives such as the digital ID program for the California DMV, and the verifiable digital credentials program in Utah. We are private sector participants in NIST's National Cyber Security of Excellence initiative for privacy-preserving digital ID.

We are hiring skilled engineers who care about making a real impact in improving public services, digital autonomy, and user privacy for the world. We work closely with public sector agencies, and have high regard for public servants. We have a strong engineering and customer-oriented culture, and are not simply a SaaS product or AI wrapper. Our roles are not for the faint of heart: you will be expected to work hard and learn a lot in this role.

Our engineers are ambitious to get outcomes for our customers and their constituents. On any given day, they may write great Rust/C#/TypeScript, deal with mainframe dumps, read policy documents, respond to technical RFIs/RFPs, manage on-prem environments, implement new NFC + Bluetooth protocols in Swift/Kotlin, create CI/CD processes that enforce W3C accessibility guidelines and i18n requirements, rewrite lost specs from disassembled binaries, figure out stablecoin payments, and design new protections for public key infrastructure. It is a team effort, and people with T-shirt shaped skills are able to collaborate and learn a ton from each other every day.

We are interested in candidates who want to be proud of the meaningful impact they make for society, even if it takes time to get right. This is not the right job for someone who wants to "join a cool new AI startup" that implodes or exits in under a year.

See our roles here: https://jobs.lever.co/sprucesystems/

Spruce lets users control their data across the web. Instead of users logging into platforms, we believe platforms should request to access data vaults controlled by users.

The demand for trusted digital ID is accelerating as AI deepfakes begin to destroy most of the ways we use to verify identity today. How private or secure is it to hold your driver's license or passport up to a webcam to get a bank account? Was it ever private or secure? Stable diffusion can break so much of this already. Society will need trusted digital IDs and credentials. Our mission is to allow them to be controlled by individuals, with safeguards to prevent descents into surveillance states and checkpoint societies.

We are the main implementers of category-defining initiatives such as the digital ID program for the California DMV, and the verifiable digital credentials program in Utah. We are private sector participants in NIST's National Cyber Security of Excellence initiative for privacy-preserving digital ID.

Today, we are hiring highly capable engineers who care about making a real impact in improving public services, digital autonomy, and user privacy for the world. We work closely with public sector agencies, and everyone on our team has a high regard for those in the public service. We have a strong engineering culture. We are not a SaaS product or AI wrapper, and our roles are not for the faint of heart. You will be expected to work hard and learn a lot in this role.

Our engineers are incredibly ambitious. On any given day, they may write great Rust/C#/TypeScript, deal with mainframe dumps, read policy documents, respond to technical RFIs/RFPs, manage on-prem environments, implement new NFC + Bluetooth protocols in Swift/Kotlin, create CI/CD processes that enforce W3C accessibility guidelines and i18n requirements, rewrite lost specs from disassembled binaries, figure out stablecoin payments, and design new protections for public key infrastructure. It is a team effort, and people with T-shirt shaped skills are able to collaborate and learn a ton from each other every day.

The potential impact of this work cannot be understated, and this is not the right job for you if you want to "join a cool new AI startup" and make a fast exit. However, if you care about our mission, then you will have the opportunity to make meaningful outcomes for society that will make you feel proud.

See our roles here: https://jobs.lever.co/sprucesystems/

If you're interested in this topic, we recently proposed new models for identity in the financial sector:

https://blog.spruceid.com/modernizing-bsa-and-aml-cft-compli...

If you feel very strongly about what we do, please email me directly with your reasons and resume at wayne AT spruceid.com.

Spruce lets users control their data across the web. Instead of users logging into platforms, we believe platforms should request to access data vaults controlled by users.

The demand for trusted digital ID is accelerating as AI deepfakes begin to destroy most of the ways we use to verify identity today. How private or secure is it to hold your driver's license or passport up to a webcam to get a bank account? Was it ever private or secure? Stable diffusion can break so much of this already. Society will need trusted digital IDs, and our mission is to allow them to be controlled by individuals, with safeguards to prevent descents into surveillance states and checkpoint societies.

We are the main implementers of category-defining initiatives such as the digital ID program for the California DMV, and the verifiable digital credentials program in Utah. We are private sector participants in NIST's National Cyber Security of Excellence initiative for privacy-preserving digital ID.

Today, we are hiring highly capable engineers who care about making a real impact in improving public services, digital autonomy, and user privacy for the world. We work closely with public sector agencies, and everyone on our team has a high regard for those in the public service. We have a strong engineering culture. We are not a SaaS or AI company, and our roles are not for the faint of heart. You will be expected to work hard and learn a lot in this role.

Our engineers are incredibly ambitious. On any given day, they may write great Rust/C#/TypeScript, deal with mainframe dumps, read policy documents, respond to technical RFIs/RFPs, manage on-prem environments, implement new NFC + Bluetooth protocols in Swift/Kotlin, create CI/CD processes that enforce W3C accessibility guidelines and i18n requirements, rewrite lost specs from disassembled binaries, and design new protections for public key infrastructure. It is a team effort, and people with T-shirt shaped skills are able to collaborate and learn a ton from each other every day.

The potential impact of this work cannot be understated, and this is not the right job for you if you want to "join a cool AI startup" and make a fast exit. However, if you care about our mission, then you will have the opportunity to make meaningful outcomes for society that will make you feel proud.

See our roles here: https://jobs.lever.co/sprucesystems/

If you feel very strongly about what we do, please email me directly with your reasons and resume at wayne AT spruceid.com.

Spruce lets users control their data across the web. We are creating the world’s best open source software for user-centric digital identity. Instead of users logging into platforms, we think platforms should request to access data vaults controlled by users.

We hire programmers who love technology and are committed to intellectual honesty, user privacy, and innovation. Our products are composed from a combination of industry-trusted frameworks, applied cryptography, new interoperable identity standards (W3C, ISO/IEC, IETF, and OpenID), and custom backend libraries.

Select roles:

Senior Technical Product Manager: Help drive the growth of a new product family which empowers government agencies and enterprises to manage the entire lifecycle of digital credentials for a wide range of use cases. This role will be responsible for collaborating on product vision, roadmap, user stories, timelines, and implementation strategy.

Software Engineer, Android: Build software prototypes and product features from start to finish for Android, embedding our Rust core.

See all roles here: https://jobs.lever.co/sprucesystems/

Spruce lets users control their data across the web. We are creating the world’s best open source software for user-centric digital identity. Instead of users logging into platforms, we think platforms should request to access data vaults controlled by users.

We hire programmers who love technology and are committed to intellectual honesty, user privacy, and innovation. Our products are composed from a combination of industry-trusted frameworks, applied cryptography, new interoperable identity standards (W3C, ISO/IEC, IETF, and OpenID), and custom backend libraries.

Select roles:

Senior Product Manager: Help drive the growth of a new product family which empowers government agencies and enterprises to manage the entire lifecycle of digital credentials for a wide range of use cases. This role will be responsible for developing product vision, roadmap, user stories, timelines, and implementation strategy.

Software Engineer, Android: Build software prototypes and product features from start to finish for Android and iOS, embedding our Rust core.

See all roles here: https://jobs.lever.co/sprucesystems/

What's new about this vs. JWTs? Roughly,

JWTs generally happen in two steps:

  1. Get JWT (private)
  2. Present JWT

  1. Get JWP precursor (private)
  2. Generate JWP from JWP precursor (private)
  3. Present JWP

Spruce lets users control their data across the web. We are creating the world’s best open source software for user-centric digital identity. Instead of users logging into platforms, we think platforms should ask permission to access data vaults controlled by users.

We hire programmers who love technology and are committed to intellectual honesty, user privacy, and innovation. Our products are composed from a combination of industry-trusted frameworks, applied cryptography, new interoperable identity standards (W3C, ISO/IEC, IETF, and OpenID), and custom backend libraries.

Select roles:

Senior Product Manager: Help drive the growth of a new product family which empowers government agencies and enterprises to manage the entire lifecycle of digital credentials for a wide range of use cases. This role will be responsible for developing product vision, roadmap, user stories, timelines, and implementation strategy.

Software Engineer, Android: Build software prototypes and product features from start to finish for Android and iOS, embedding our Rust core.

See all roles here: https://jobs.lever.co/sprucesystems/

Spruce lets users control their data across the web. We are creating the world’s best open source software for user-centric digital identity. Instead of users logging into platforms, we think platforms should ask permission to access data vaults controlled by users.

We hire programmers who love technology and are committed to intellectual honesty, user privacy, and innovation. Our products are composed from a combination of industry-trusted frameworks, applied cryptography, new interoperable identity standards (W3C, ISO/IEC, IETF, and OpenID), and custom backend libraries.

Select roles:

Technical Success Manager: Work with external customers and stakeholders, maintaining implementation roadmaps, collaborating on product roadmaps, and documenting user stories, timelines, and implementation strategy at the customer level.

Software Engineer, Android: Build software prototypes and product features from start to finish for Android and iOS, embedding our Rust core.

See all roles here: https://jobs.lever.co/sprucesystems/

Spruce lets users control their data across the web. We are creating the world’s best open source software for user-centric digital identity. Instead of users logging into platforms, we think platforms should ask permission to access data vaults controlled by users.

We hire programmers who love technology and are committed to intellectual honesty, user privacy, and innovation. Our products are composed from a combination of industry-trusted frameworks, applied cryptography, new interoperable identity standards (W3C, ISO/IEC, IETF, and OpenID), and custom backend libraries.

Select roles:

Technical Success Manager: Work with external customers and stakeholders, maintaining implementation roadmaps, collaborating on product roadmaps, and documenting user stories, timelines, and implementation strategy at the customer level.

Software Engineer, SRE: Implement reliable and performant features in Rust that is cross-compiled to servers, mobile devices, and WASM.

Software Engineer, Android: Build software prototypes and product features from start to finish for Android and iOS, embedding our Rust core.

See all roles here: https://jobs.lever.co/sprucesystems/

Spruce lets users control their data across the web. We are reimagining trusted interactions by creating the world’s best open source software for packaging beliefs digitally, while innovating on global standards in identity.

We hire programmers who love technology and are committed to intellectual honesty, user privacy, and innovation. Our products are composed from a combination of industry-trusted frameworks, applied cryptography, new interoperable identity standards (W3C, ISO, IETF, and OpenID), and custom backend libraries.

Select roles:

Technical Success Manager: Work with external customers and stakeholders, maintaining implementation roadmaps, collaborating on product roadmaps, and documenting user stories, timelines, and implementation strategy at the customer level.

Software Engineer, SRE: Implement reliable and performant features in Rust that is cross-compiled to servers, mobile devices, and WASM.

Software Engineer, Android: Build software prototypes and product features from start to finish for Android and iOS, embedding our Rust core.

See all roles here: https://jobs.lever.co/sprucesystems/

Spruce lets users control their data across the web. We are reimagining trusted interactions by creating the world’s best open source software for packaging beliefs digitally, while innovating on global standards in identity.

We hire programmers who love technology and are committed to intellectual honesty, user privacy, and innovation. Our products are composed from a combination of industry-trusted frameworks, applied cryptography, new interoperable identity standards (W3C, ISO, IETF, and OpenID), and custom backend libraries.

Select roles:

Technical Success Manager: Work with external customers and stakeholders, maintaining implementation roadmaps, collaborating on product roadmaps, and documenting user stories, timelines, and implementation strategy at the customer level.

Software Engineer, Android: Build software prototypes and product features from start to finish for Android and iOS, embedding our Rust core.

Software Engineer, SRE: Implement reliable and performant features in Rust that is cross-compiled to servers, mobile devices, and WASM.

See all roles here: https://jobs.lever.co/sprucesystems/

We hire programmers who love technology and are committed to intellectual honesty, user privacy, and innovation. Our products are composed from a combination of industry-trusted frameworks, applied cryptography, new interoperable identity standards (W3C, ISO, IETF, and OpenID), and custom backend libraries.

Select roles:

Software Engineer, Mobile: Build software prototypes and product features from start to finish for Android and iOS, embedding our Rust core.

Software Engineer, Backend: Implement reliable and performant features in Rust that is cross-compiled to servers, mobile devices, and WASM.

See all roles here: https://jobs.lever.co/sprucesystems/