Software Engineer, Identity & Access Management
Hadrian Automation5 months ago
Base Salary
$193k - $274k/yr
Responsibilities
- Design and implement scalable authentication and authorization for human operators and machine identities across cloud and factory-floor environments.
- Own authentication capabilities including SSO, MFA, OIDC/SAML integrations, and service-to-service authentication across AWS, GCP, and future cloud environments.
- Build fine-grained RBAC, ABAC, and ReBAC systems for internal teams, factory systems, and external API partners.
- Develop frameworks, APIs, and CLI tools that automate credential provisioning, rotation, and policy enforcement.
- Build identity and access models for machine-to-machine communication across factory systems, Kubernetes workloads, and cloud services.
- Partner with Security on compliance, audit requirements, and troubleshooting complex identity and access issues.
- Partner with the API Platform PM to deliver IAM capabilities as developer-friendly product experiences.
- Build tooling, SDKs, and documentation that promote correct IAM integration.
- Set IAM standards across the engineering organization and serve as the domain expert for access-sensitive architecture decisions.
Requirements
- 8–12+ years of software engineering experience, including 3+ years focused on identity, authentication, or authorization systems at scale.
- Deep hands-on expertise with OAuth 2.0, OpenID Connect, SAML, and SCIM.
- Strong understanding of RBAC, ABAC, and ReBAC access-control models.
- Experience designing IAM systems across AWS, GCP, and Azure.
- Knowledge of threat modeling, risk assessment, least-privilege principles, and secure software development practices.
- Proficiency in Go, Python, or a similar programming language.
- Ability to set technical direction independently, write design documentation, and align teams.
- Bachelor’s degree in Computer Science or a related field, or equivalent experience.
- Preferred experience serving external developer ecosystems and building identity systems for service accounts, workload identities, machine certificates, and Kubernetes service accounts.
- Preferred familiarity with OPA, Casbin, or similar policy-as-code frameworks, zero-trust network architecture, and Vault or equivalent secrets-management platforms.
- Experience in aerospace, defense, or manufacturing environments involving ITAR or export-control considerations is preferred.
Benefits
- Medical, dental, vision, and life insurance plans are provided.
- 401(k) is provided.
- Relocation support may be available for certain situations based on business need.
- Flexible vacation policy is offered.
- The role is subject to U.S. ITAR eligibility or authorization requirements.
Tech Stack
About Hadrian Automation
Hadrian Automation builds autonomous, software-driven factories that manufacture precision components for aerospace and defense programs, including rockets, satellites, aircraft, and ships. The company operates a Factory-as-a-Service platform, combining AI, robotics, and full-stack machining and fabrication to deliver critical parts and production capacity. Founded in 2021 and headquartered in Los Angeles, it is privately held and expanding capabilities across welding, casting, forging, electronics, and additive manufacturing.