Senior Identity & Auth Engineer
True Anomalyabout 4 hours ago
Denver, CO, USASenior / Staff+
Base Salary
$150k - $225k/yr
Responsibilities
- Architect and deploy Kubernetes-native identity and authorization infrastructure for IL6 multi-tenant environments.
- Serve as a technical authority for identity/auth controls during ATO processes.
- Design and implement multi-tenant isolation strategies ensuring zero lateral movement.
- Evaluate, deploy, and harden self-hosted IdPs for classified Kubernetes clusters.
- Design authorization models for space operations with fine-grained access control.
- Implement workload identity frameworks and service mesh authentication.
- Build policy-as-code systems for automated compliance enforcement.
- Integrate with government identity systems and legacy applications.
- Collaborate on secret management strategy for IL6 environments.
- Work with application teams to define authentication/authorization contracts.
- Partner with customers and auditors during ATO processes.
- Stay current on emerging identity/auth technologies.
Requirements
- Eligible for TS/SCI clearance, with active clearance preferred.
- 10+ years in platform/security engineering with 5+ years in identity/auth systems.
- Experience designing multi-tenant architectures with strong security boundaries.
- 3+ years of production experience with Kubernetes clusters.
- Production experience with at least one K8s-native IdP or enterprise IAM system.
- Implemented RBAC, ABAC, or ReBAC authorization models in production.
- Deep understanding of zero trust principles and NIST SP 800-207.
- Working knowledge of compliance frameworks like NIST 800-53 or FedRAMP High.
- Proficiency in Python, Go, or Bash for automation.
Benefits
- Platinum healthcare coverage.
- Flexible work hours and location.
- Highly competitive compensation.
- Generous stock options package.