Software Engineer, Identity & Access Management
$192,000 per year
Apply (opens in a new tab)Software Engineer, Identity & Access Management
Posted 3 days ago
SENIORITY
Lead
SALARY
$192,000 per year
About the role
- Design and implement scalable authentication and authorization systems covering both human operators and machine identities across cloud and factory floor environments — serving as the security foundation for the API Platform
- Own Hadrian's authentication stack: SSO, MFA, OIDC/SAML integrations, and service-to-service auth across AWS, GCP, and future cloud environments
- Build fine-grained access control systems (RBAC/ABAC/ReBAC) that scale across internal engineering teams, factory systems, and external API partners
- Develop frameworks, APIs, and CLI tools that automate credential provisioning, rotation, and policy enforcement for both internal teams and external API consumers
- Build identity and access models for machine-to-machine communication across factory floor systems, Kubernetes workloads, and cloud services
- Partner with Security to ensure IAM systems meet compliance and audit requirements; troubleshoot complex identity and access issues across distributed systems
- Work with the API Platform PM to define how IAM capabilities are surfaced as developer-friendly product experiences — for internal engineers and external partners alike
- Build tooling, SDKs, and documentation that make it easy to integrate with IAM correctly and hard to do so incorrectly
- Set IAM standards across the engineering org and act as the domain expert on access-sensitive architecture decisions
- What We're Looking For8–12+ years in software engineering, with 3+ years of focused experience in identity, authentication, or authorization systems at scale
- Deep, hands-on expertise in modern auth protocols: OAuth 2.0, OpenID Connect (OIDC), SAML, and SCIMStrong understanding of access control models — RBAC, ABAC, and ReBAC — and the ability to make sound architectural tradeoffs between them
- Experience designing IAM systems across multi-cloud environments (AWS, GCP, Azure)
- Security-first mindset: you understand threat modeling, risk assessment, and least-privilege principles, and you embed security throughout the SDLCProficiency in Go, Python, or similar; track record of writing high-quality, maintainable code
- Ability to set technical direction independently, write clear design docs, and drive alignment across teams
- Comfort working alongside a PM counterpart — you can divide technical and product ownership clearly and collaborate effectively
- Bachelor's degree in Computer Science or related field, or equivalent experience
- What Will Set You Apart
- Experience building IAM systems that serve external developer ecosystems — not just internal users
- Experience building identity systems for non-human entities: service accounts, workload identity, machine certificates, Kubernetes service accounts
- Familiarity with policy-as-code frameworks (OPA, Casbin, or similar)
- Experience with zero-trust network architecture
- Hands-on experience with secrets management platforms (Vault or equivalent) at scale
- Prior experience in aerospace, defense, or manufacturing environments with ITAR or export control considerations
- Experience working alongside a PM on a developer-facing platform product
- Growth & Trajectory
Before you apply
Applying takes about a minute. These four things decide how fast it moves after that.
Your profile is current
It's what we read first. Occupations, seniority and locations matter more than a long history.
Two examples you can talk through
Not a portfolio — just two pieces of work where you can explain the decisions and what you'd change.
A number in mind
What you're on now and what would make you move. We negotiate better when we know both.
Your notice period
Employers plan around it, and it's the question that stalls offers most often.
Once you apply, someone reads it and calls you before anything reaches the employer — usually within two working days.
