Software Engineer, Identity & Access Management

The role

You will build the security foundation for the API Platform by owning authentication, authorization, and credential automation. This role covers cloud infrastructure, Kubernetes workloads, and factory floor systems.

What you will do

• Design and implement scalable authentication and authorization systems for human and machine identities
• Own the authentication stack including SSO, MFA, OIDC/SAML, and service-to-service auth
• Build fine-grained access control systems like RBAC, ABAC, and ReBAC
• Develop frameworks, APIs, and CLI tools for credential provisioning and policy enforcement
• Build identity and access models for machine-to-machine communication
• Partner with Security to ensure IAM systems meet compliance and audit requirements
• Work with the API Platform PM to define developer-friendly IAM product experiences
• Build tooling, SDKs, and documentation for IAM integration
• Set IAM standards across the engineering organization

Required qualifications

• 8–12+ years in software engineering
• 3+ years of focused experience in identity, authentication, or authorization systems at scale
• Deep, hands-on expertise in OAuth 2.0, OpenID Connect (OIDC), SAML, and SCIM
• Strong understanding of RBAC, ABAC, and ReBAC
• Experience designing IAM systems across multi-cloud environments (AWS, GCP, Azure)
• Security-first mindset including threat modeling, risk assessment, and least-privilege principles
• Proficiency in Go, Python, or similar
• Ability to set technical direction independently, write design docs, and drive alignment
• Comfort working alongside a PM counterpart
• Bachelor's degree in Computer Science or related field, or equivalent experience

Nice to have

• Experience building IAM systems that serve external developer ecosystems
• Experience building identity systems for non-human entities
• Familiarity with policy-as-code frameworks (OPA, Casbin, or similar)
• Experience with zero-trust network architecture
• Hands-on experience with secrets management platforms (Vault or equivalent) at scale
• Prior experience in aerospace, defense, or manufacturing environments with ITAR or export control considerations
• Experience working alongside a PM on a developer-facing platform product

Benefits

• Medical, dental, vision, and life insurance plans
• 401k
• Relocation support may be provided for certain situations
• Flexible vacation policy
• Equity

Before you apply

• To conform to ITAR, you must be a U.S. citizen or national, lawful permanent resident, protected individual, or eligible to obtain required authorizations from the U.S. Department of State

About the company

Hadrian is building autonomous factories to reindustrialize America by combining AI, advanced software, robotics, and full-stack manufacturing.