3 hours ago
Remote, United StatesSenior
Responsibilities
- Build authentication and authorization capabilities, including token validation, trust anchors, permission models, delegation, multitenancy, and machine-to-machine access.
- Build and maintain PKI components for certificate issuance, rotation, and revocation.
- Develop workload identity and authentication/authorization SDKs used by internal teams and customers.
- Build access controls and client libraries for secrets and keys.
- Implement structured audit logging that makes authorization decisions reconstructable in regulated, classified, and disconnected environments.
- Contribute to threat models and implement mitigations that address root causes.
- Operate production systems, including availability, upgrades, security maintenance, on-call rotations, and incident response.
- Collaborate with product, infrastructure, and developer platform engineers on adoption, hardened images, supply-chain controls, and pipeline gates.
Requirements
- 5+ years of backend software engineering experience on production services.
- Experience with Go, or backend experience in a comparable language with readiness to work in Go daily.
- Hands-on experience with at least one authentication or authorization system, identity provider integration, certificate authority, or secrets/key-management service.
- Understanding of token-based authentication failures, including audience confusion, unverified issuers, key confusion, and redirect handling at token endpoints, along with prevention techniques.
- Working knowledge of Kubernetes and cloud infrastructure.
- Experience owning a production component, including on-call rotations and incident response.
- Clear written and verbal communication skills, including the ability to explain security tradeoffs to engineers.
- Preferred: experience with regulated, disconnected, or high-assurance environments.
- Preferred: experience integrating or operating OIDC providers such as Zitadel, Keycloak, Okta, Auth0, or comparable systems.
- Preferred: experience with policy engines, RBAC, ReBAC, SPIFFE/SPIRE, Vault, cloud KMS, HSM-backed key management, audit logging, evidence generation, or threat modeling.
- Bachelor’s degree in Computer Science or a related technical field, or equivalent practical experience.
Benefits
- Flexible working arrangements, including hybrid remote/in-office schedules.
- Professional development and career advancement opportunities.
- 401(k), dental, vision, health, and life insurance benefits.
- Paid time off and equity options.
- Work supporting critical national security programs and aerospace communications technology.
Tech Stack
Categories
About Aalyria
Aalyria builds networking technologies for operating high-throughput, moving networks across land, sea, air, and space. Its products include Tightbeam, an ultra-high-speed free-space optical communications system, and Spacetime, a platform-as-a-service for modeling, planning, and orchestrating dynamic networks for commercial and government operators. Privately held and headquartered in Livermore, California, Aalyria originated from technologies developed at Alphabet and serves aerospace, telecommunications, and national security markets.