Skip to content
CV Rocket
Get started
How it worksThe enginePricingBlogContactSign in

Open nowPosted 28 days ago

IAM 研发专家（机器人身份与内部 SSO／ACL）

x2-robot/index203 open roles

Where
Shenzhen, Guangdong, Chinese Mainland
Get the CV for this job

From $25 per CV, paid once. No subscription.

Your applicationOpen nowIAM 研发专家（机器人身份与内部 SSO／ACL）x2-robot/index · Shenzhen, Guangdong, Chinese Mainland

  1. YouYes, apply to this one.

  2. CV RocketCV written for this posting.

  3. 25 readersRecruiter, hiring manager, skeptic. Round after round.

  4. CV RocketApplied on x2-robot/index's own form.

The reply lands in your private mailbox

3×more interviews than doing it yourself with ChatGPT.

The clock on this job

Early applications get read.

12.3% of postings close within 7 days. Measured by our own scanner across the market. x2-robot/index postings stay open a median of 1 days.

Share of postings closed within
  1. 2.1%1 day
  2. 4.5%3 days
  3. 12.3%7 days
  4. 19.3%14 days
  5. 35.6%30 days
  6. 57.8%60 days
This job: posted 28 days ago

x2-robot/index median: 1 days open

The posting

负责具身机器人及企业内部身份与访问管理体系的架构和核心研发：覆盖机器人设备、边缘节点、云端工作负载及 Agent 的身份与授权，同时建设内部 SSO、ACL 和统一权限平台，实现端—边—云与内部业务系统中身份可验证、访问可控制、权限可撤销、行为可追溯。

1. 主导机器人端—边—云 IAM 建设，区分设备身份与软件工作负载身份，建立设备注册激活、租户绑定、密钥与证书发放轮换、归属迁移及退役撤销机制；保障机器人、边缘节点与云服务间的身份认证和访问授权。 2. 负责企业内部 SSO、ACL 与统一权限平台建设，打通办公、研发及业务系统，覆盖账号生命周期、身份同步与联邦、多因素认证、用户组及角色管理；实现资源级授权、权限申请审批、授权回收与审计。 3. 设计 AI 应用与 Agent 的身份和委托授权体系，明确操作人员、Agent、工作负载与目标机器人的权限关系；在模型外落实工具调用、指令下发、远程运维和数据访问的细粒度授权、最小权限及高风险操作确认。 4. 研发统一鉴权 SDK、网关与策略服务，按场景选型和实现证书认证、令牌绑定及委托访问机制；负责高可用、性能与审计追踪，设计弱网和离线条件下的授权有效期、允许操作范围及恢复联网后的状态同步，兼顾业务连续性与物理安全。

1. 主导过 IAM、SSO 或统一权限平台的架构与核心研发，具备内部系统集成、账号生命周期和 ACL 授权的落地经验，并有设备或工作负载身份体系的设计与实现经验，能够说明本人负责的关键模块及实际效果。 2. 熟悉 OAuth 2.0、OIDC、SAML／SCIM 及相关标准，能够依据 DPoP（RFC 9449）、mTLS 与证书绑定令牌（RFC 8705）、Token Exchange（RFC 8693） 和 OAuth 安全最佳实践（RFC 9700） 正确选型、实现或集成；理解持钥证明、受众与权限范围约束、委托及防重放机制，能够区分令牌绑定、客户端认证与设备可信验证。 3. 具备 AI 工程实战能力：亲自交付过 LLM、RAG 或 Agent 项目的身份、授权、工具接入或安全模块，能够还原用户—Agent—工具／机器人调用链，并通过模型外授权、凭据隔离及评测验证权限边界。 4. 精通 Go、Java 等至少一种后端语言，理解 PKI、证书链校验、密钥保护及细粒度权限模型；能够处理高并发鉴权、策略缓存与权限一致性，并结合设备资源、时钟偏差和弱网约束，设计凭据轮换、撤销生效窗口及安全降级机制。

加分项 - 有工作负载身份、SPIFFE/SPIRE、PAM、细粒度授权引擎或大规模多租户 IAM 建设经验。 - 有 Agent 平台身份体系、MCP 认证授权、开源 IAM 或策略引擎的核心贡献。

From $25, paid onceGet the CV for this job

What happens when you press

One press. We do the rest.

  1. A CV for this posting

    Written against x2-robot/index's own wording, from every piece of relevant proof in your profile.

  2. 25 readers review it

    Recruiter, hiring manager, skeptic and more read every draft, round after round. You get the best round.

    The review screen in CV Rocket: how each CV was read, round by round.

  3. We apply on x2-robot/index's form

    Our application engine gets through the hardest forms there are. Where a question needs you, AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

    An application in CV Rocket: every answer filled in on the employer's form.

  4. Every reply, sorted

    x2-robot/index's answer lands in your private mailbox, and we classify it on arrival: interview, question, rejection.

    The CV Rocket inbox: each employer reply classified as an interview, an action or a rejection.

  5. Reply with AI

    AI helps you write the email, checks it and sends it. We show you whether the recruiter read it.

  6. The interview in your calendar

    Full integration with your calendar. The invitation goes straight in.

    An interview invitation in the CV Rocket inbox, added to the candidate's calendar.
Get the CV for this job

From $25 per CV, paid once. No subscription.

Why it works

3×

more interviews than doing it yourself with ChatGPT.

ChatGPT writes a CV and never learns what happened to it. We see every reply. For each CV we know:

  • How it was written, and how the review scored it
  • When we applied, and how long after the posting went up
  • Which posting, which company, which city
  • Who got the interview, and who heard nothing

That is how we know which CVs get called.

Get the CV for this job

From $25 per CV, paid once. No subscription.

The numbers game

More applications. More interviews.

Every application goes out with its own CV, written for that posting and paid once. Send enough of them and the law of large numbers finds you the job.

Get the CV for this job
By hand5–10
With CV Rocket100
applications a day

Nearby

Live postings like this one

Same employer first, then the same role elsewhere.

Before you press

Straight answers

Get the CV for this job

From $25 per CV, paid once. No subscription.

What if my background isn't good enough?

We make the most of the background you have. The CV uses every piece of relevant proof your profile holds, and one of the 25 readers reads your whole profile and flags what the CV left out.

Do you really apply for me?

Yes, on the employer's own form, the hardest ones included. Where a question needs you, you answer it right there and AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

Is it a subscription?

No. You pay once per CV, from $25. Every application goes out with its own CV, written for that posting.

One job. One CV.
Paid once.

Pick the posting you want. We write for it, apply for you and catch the reply.

Get the CV for this job

From $25 per CV, paid once. No subscription.