aren

Foxpass (YCS15) | San Francisco, CA | FULL-TIME | REMOTE | Senior Software Engineer (Backend)

Foxpass, a seed-stage YCombinator (S15) company, is looking for early employees who wish to create software to help companies implement good security practices in their infrastructure. Doing security "the right way" should be easy. Our first product offers SSH key management, LDAP, and RADIUS in the cloud to ensure that engineers and employees use their own accounts to log into servers and wireless networks. Furthermore, we're encouraging companies to make access control API-based, so that access can be given and then rescinded as soon as possible (on-call shift over, JIRA ticket closed, etc.).

We are looking for:

1) A senior back-end engineer who has significant experience with building and operating high-uptime, high-performance systems in the cloud. See https://angel.co/company/foxpass/jobs/79642-senior-software-...

2) Account Executives with SaaS security sales experience

email me: [email protected]. No agencies, please.

Foxpass (YCS15) | San Francisco, CA | FULL-TIME | REMOTE | Senior Software Engineer (Backend)

Foxpass, a YCombinator (S15) company, is looking for early employees who wish to create software to help companies implement good security practices in their infrastructure. Doing security "the right way" should be easy. Our first product offers SSH key management, LDAP, and RADIUS in the cloud to ensure that engineers and employees use their own accounts to log into servers and wireless networks. Furthermore, we're encouraging companies to make access control API-based, so that access can be given and then rescinded as soon as possible (on-call shift over, JIRA ticket closed, etc.).

We are looking for:

1) A senior back-end engineer who has significant experience with building and operating high-uptime, high-performance systems in the cloud. https://angel.co/company/foxpass/jobs/79642-senior-software-...

email me: [email protected]. No agencies, please.

Foxpass (YCS15) | San Francisco, CA | FULL-TIME | ONSITE or REMOTE | Senior Software Engineer (Backend) & Head of Marketing

Foxpass, a YCombinator (S15) company, is looking for early employees who wish to create software to help companies implement good security practices in their infrastructure. Doing security "the right way" should be easy. Our first product offers SSH key management, LDAP, and RADIUS in the cloud to ensure that engineers and employees use their own accounts to log into servers and wireless networks. Furthermore, we're encouraging companies to make access control API-based, so that access can be given and then rescinded as soon as possible (on-call shift over, JIRA ticket closed, etc.).

We are looking for:

1) A senior back-end engineer who has significant experience with building and operating high-uptime, high-performance systems in the cloud. https://angel.co/foxpass/jobs/79642-senior-software-engineer

2) A Head of Marketing to kick off our marketing function to spread the word and help us find more happy Foxpass customers. https://angel.co/foxpass/jobs/468017-head-of-marketing

email me: [email protected]. No agencies, please.

Foxpass (YCS15) | San Francisco, CA | FULL-TIME | ONSITE or REMOTE | Senior Software Engineer (Backend) & Director of Marketing

Foxpass, a YCombinator (S15) company, is looking for early employees who wish to create software to help companies implement good security practices in their infrastructure. Doing security "the right way" should be easy. Our first product offers SSH key management, LDAP, and RADIUS in the cloud to ensure that engineers and employees use their own accounts to log into servers and wireless networks. Furthermore, we're encouraging companies to make access control API-based, so that access can be given and then rescinded as soon as possible (on-call shift over, JIRA ticket closed, etc.).

We are looking for:

1) A senior back-end engineer who has significant experience with building and operating high-uptime, high-performance systems in the cloud. https://angel.co/foxpass/jobs/79642-senior-software-engineer

2) A Director of Marketing to kick off our marketing function to spread the word and help us find more happy Foxpass customers. Requirement: 6-8 years experience at a similar company.

email me: [email protected]. No agencies, please.

We (Foxpass, https://www.foxpass.com/) are a YCS15 company offering a SaaS (or on-prem) service to handle SSH key management & rotation, plus user and group management.

With our API, some customers are creating dynamic access rules (for example, an on-caller might have 'sudo' during their on-call week, but not at other times).

Like a hosted FreeIPA, but more powerful.

Foxpass (YCS15) | San Francisco, CA | FULL-TIME | ONSITE or REMOTE | Senior Software Engineer (Backend) & Account Executive

Foxpass, a YCombinator (S15) company, is looking for early employees who wish to create software to help companies implement good security practices in their infrastructure. Doing security "the right way" should be easy. Our first product offers SSH key management, LDAP, and RADIUS in the cloud to ensure that engineers and employees use their own accounts to log into servers and wireless networks. Furthermore, we're encouraging companies to make access control API-based, so that access can be given and then rescinded as soon as possible (on-call shift over, JIRA ticket closed, etc.).

We are looking for:

1) A senior back-end engineer who has significant experience with building and operating high-uptime, high-performance systems in the cloud.

2) An account executive to manage the inbound leads and convert them into happy Foxpass customers.

email me: [email protected]

I didn't mention it in the original post, but Foxpass also has an LDAP endpoint so it can manage users and groups on your linux machines.

This means you can set up a linux group with sudo capabilities (sudo or wheel, usually) in /etc/sudoers. Then using Foxpass you can manage the membership of that group by adding users on a permanent or temporary basis.

My company Foxpass (YC S15) has a product to manage SSH keys. It serves as access control too -- the keys are only available on the hosts where a user should have access.

https://www.foxpass.com/

Hey HN -- Foxpass founder here. We built this to make it really simple to set up a VPN in your AWS infrastructure with the best security practices (directory integration and two-factor auth) built right in. Would love your feedback and pull requests! (https://github.com/foxpass/foxpass-ipsec-vpn)

Congrats to the Gravitational team on teleport! LDAP/RADIUS/etc are often useful only for internal employee access. Teleport brings (among other things) a new level of flexibility for secure remote management (say, by a vendor perhaps), so I don't see it as a replacement for the traditional auth protocols.

In terms of making LDAP/RADIUS easier, well, we're a YC company that does just that! Foxpass (S15) https://www.foxpass.com/.

Great tool. Key rotation is so often overlooked but really important.

For anyone who wants to enforce ssh key rotation, consider using our product Foxpass (YC S15), which (effectively) automatically removes keys after a set amount of time (e.g. 90 days).

https://www.foxpass.com/

Foxpass | San Francisco, CA | Full Time | ONSITE

Y Combinator S2015

Help us make great DevOps and IT security simple for all companies. Our first product makes it easy for employees to log into company servers, VPNs, and wireless networks using their Google Apps credentials, plus we take care of managing and rotating their SSH keys. Imagine giving an engineer only temporary permissions to your most sensitive servers, and auditing their access. We make that (and more) simple.

We have launched our product, have paying customers and now need to build out the team. We are looking for an experienced back-end engineer with experience in high-uptime environments. "DevOps" experience a big plus. Large equity stake.

https://www.foxpass.com/jobs/

Foxpass (YC S15) | Full-stack Engineer & Back-End Engineer | San Francisco, CA | REMOTE (U.S.-only) considered | www.foxpass.com

Foxpass is a Y Combinator Summer 2015 startup building security products for small-to-medium sized tech companies and schools. We want to make it easy for everyone to have good security practices.

Our first product is LDAP, RADIUS, and SSH key management in the cloud. We need back-end engineers to continue to add features to our service, plus help us maintain our excellent uptime record. We also need a full-stack engineer who can help us put a nice UI on all of the features we provide, plus wire up new features. We’re built on Python and Django now, but who knows what the future holds.

This is a great chance to join a young company early; you will be one of the first non-founding engineers and will get a meaningful equity stake.

To apply, please email me at [email protected].

We'd love to have you as a customer! We don't store any plaintext secrets. Passwords are bcrypted and public keys can safely be public. If I misunderstood your question or if you want a more in-depth answer, please drop me a line: aren@.

But oh-so-important!

Yep! Foxpass already integrates with SSO providers like Okta and OneLogin, and soon we'll add support for Office 365.

Foxpass started here as a "Show HN" back in February (https://news.ycombinator.com/item?id=9039027) and now we're part of the current batch.

Would love your feedback and of course I'm happy to answer any questions!

Thanks! "ldaps" (ldap over ssl) is supported (required, actually) but not starttls (yes).

It is.

Great questions.

I think that OAuth2 is all that Google supports right now for Google Apps authentication, at least according to https://developers.google.com/accounts/docs/OAuth2.

And yes, if a user is deprovisioned in GApps then their LDAP credentials are suspended until they are re-activated. The goal of Foxpass is to make GApps the source of truth.

I’ve set up an LDAP server at several companies and was always frustrated by how arcane they are to build and operate. So I built a SaaS one (well, a beta anyway) that’s easy to use with a simple web interface for group management, integrates with Google Apps (which is the core identity used by most young companies now), and is scalable and fully redundant. It also serves SSH keys directly to sshd, so users can take care of their own key management (and soon, admins can enforce password and key rotation schedules).

HN, I’d love your feedback!