Senior Identity & Auth Engineer
True AnomalyBase Salary
$150k - $225k/yr
Responsibilities
- Architect and deploy Kubernetes-native identity and authorization infrastructure for IL6 SECRET multi-tenant environments.
- Serve as the technical authority for identity and authorization controls during ATO processes, including compliance documentation and evidence.
- Design tenant-isolation strategies that prevent lateral movement between customer and program boundaries.
- Evaluate, deploy, and harden self-hosted identity providers for classified Kubernetes clusters.
- Design and implement fine-grained RBAC, ABAC, and ReBAC authorization models for space operations.
- Implement workload identity frameworks and service-mesh authentication.
- Build policy-as-code systems for automated runtime compliance enforcement.
- Integrate CAC/PIV, LDAP, Active Directory, and legacy SAML 2.0 applications.
- Collaborate with the security team on classified-environment secret management and encryption-key lifecycle strategy.
- Define authentication and authorization contracts with application teams for microservices.
- Partner with customers and government auditors during ATO processes to demonstrate compliance and address findings.
- Evaluate emerging identity and authorization technologies for classified environments.
Requirements
- Eligible for a TS/SCI clearance; U.S. citizenship or lawful permanent residency is required for applicable clearance and export-control requirements, with active clearance strongly preferred.
- 10+ years of platform or security engineering experience, including 5+ years focused on identity, authentication, or authorization systems.
- Experience designing and implementing strong multi-tenant isolation and zero-lateral-movement security boundaries.
- At least 3 years of production Kubernetes deployment and operations experience.
- Production experience operating a Kubernetes-native identity provider such as Keycloak or Dex, or an enterprise IAM system.
- Production experience implementing RBAC, ABAC, or ReBAC authorization models.
- Deep understanding of NIST SP 800-207 and practical zero-trust architecture patterns.
- Working knowledge of NIST 800-53, CMMC Level 3+, or FedRAMP High requirements.
- Proficiency in Python, Go, or Bash for automation and tooling.
- Preferred experience includes IL4/IL5 operations, ATO processes, modern authorization frameworks, SPIFFE/SPIRE, service meshes, secret management, CAC/PIV integration, PKI certificate management, and policy as code.
- Preferred qualifications include experience in aerospace, defense, intelligence, national security space, startups, or other fast-paced environments.
- CISSP, CCSP, Kubernetes CKS, or other security certifications and open-source identity/authentication contributions are beneficial.
Benefits
- Platinum healthcare, including health, dental, vision, and HRA/HSA options.
- PTO and paid holidays.
- 401(k) and parental leave.
- Equity and a generous stock options package.
- Flexible work hours and location within a hybrid work environment.
- Candidates must be located near Denver or Colorado Springs, with some work performed onsite.
About True Anomaly
True Anomaly is the only defense technology company focused exclusively on space defense. Founded in 2022 by ex-U.S. Space Force members, True Anomaly designs and builds advanced systems for space superiority: agile and powerful spacecraft platforms, mission software engineered for unmatched command and control, and payloads tailored for precision sensing and effects. We are headquartered in Centennial, Colorado, with regional offices in Colorado Springs, Colorado, Long Beach, California, and Washington, D.C. We are hiring and seeking exceptional talent to join True Anomaly, from any technical industry or background, to bring unique talents, perspective, and solutions. If you embrace complexity, demonstrate relentless ownership, have the resiliency and persistence to overcome challenges. If you’re like us and want your work to carry purpose and shape the future of space, visit www.WhyAreYouHere.com.