Asks for

The ad says“Strong understanding of access control models — RBAC, ABAC, and ReBAC — and the ability to make sound architectural tradeoffs between them”
The ad says“Experience designing IAM systems across multi-cloud environments (AWS, GCP, Azure)”
The ad says“Experience designing IAM systems across multi-cloud environments (AWS, GCP, Azure)”
The ad says“Familiarity with policy-as-code frameworks (OPA, Casbin, or similar)”
The ad says“Experience designing IAM systems across multi-cloud environments (AWS, GCP, Azure)”
The ad says“Proficiency in Go, Python, or similar; track record of writing high-quality, maintainable code”
The ad says“Security-first mindset: you understand threat modeling, risk assessment, and least-privilege principles, and you embed security throughout the SDLC”
The ad says“Deep, hands-on expertise in modern auth protocols: OAuth 2.0, OpenID Connect (OIDC), SAML, and SCIM”
The ad says“Familiarity with policy-as-code frameworks (OPA, Casbin, or similar)”
The ad says“Deep, hands-on expertise in modern auth protocols: OAuth 2.0, OpenID Connect (OIDC), SAML, and SCIM”
The ad says“Proficiency in Go, Python, or similar; track record of writing high-quality, maintainable code”
The ad says“Strong understanding of access control models — RBAC, ABAC, and ReBAC — and the ability to make sound architectural tradeoffs between them”
The ad says“Strong understanding of access control models — RBAC, ABAC, and ReBAC — and the ability to make sound architectural tradeoffs between them”
The ad says“Security-first mindset: you understand threat modeling, risk assessment, and least-privilege principles, and you embed security throughout the SDLC”
The ad says“Deep, hands-on expertise in modern auth protocols: OAuth 2.0, OpenID Connect (OIDC), SAML, and SCIM”
The ad says“Deep, hands-on expertise in modern auth protocols: OAuth 2.0, OpenID Connect (OIDC), SAML, and SCIM”
The ad says“Security-first mindset: you understand threat modeling, risk assessment, and least-privilege principles, and you embed security throughout the SDLC”
The ad says“Hands-on experience with secrets management platforms (Vault or equivalent) at scale”
The ad says“Experience with zero-trust network architecture”

Hadrian’s API Platform is how the outside world connects to our manufacturing systems. Every partner integration, every internal service, and every factory floor system that touches that platform depends on one thing being right: identity
Who is allowed in, what they can do, and how credentials are managed across a complex, multi-cloud, physically distributed environment
As Staff Software Engineer, Identity and Access Management, you will build the security foundation that the API Platform is built on
You will own authentication, authorization, and credential automation across cloud infrastructure, Kubernetes workloads, and factory floor systems — and you will work in close partnership with the API Platform PM to ensure that IAM capabilities are surfaced as first-class developer experiences, not bolted-on compliance requirements
This is not a supporting role. IAM is a product pillar here. You will own the technical layer end to end, set the direction for how it scales, and help define what secure-by-default looks like across everything Hadrian builds
Design and implement scalable authentication and authorization systems covering both human operators and machine identities across cloud and factory floor environments — serving as the security foundation for the API Platform
Own Hadrian’s authentication stack: SSO, MFA, OIDC/SAML integrations, and service-to-service auth across AWS, GCP, and future cloud environments
Build fine-grained access control systems (RBAC/ABAC/ReBAC) that scale across internal engineering teams, factory systems, and external API partners
Develop frameworks, APIs, and CLI tools that automate credential provisioning, rotation, and policy enforcement for both internal teams and external API consumers
Build identity and access models for machine-to-machine communication across factory floor systems, Kubernetes workloads, and cloud services
Partner with Security to ensure IAM systems meet compliance and audit requirements; troubleshoot complex identity and access issues across distributed systems
Work with the API Platform PM to define how IAM capabilities are surfaced as developer-friendly product experiences — for internal engineers and external partners alike
Build tooling, SDKs, and documentation that make it easy to integrate with IAM correctly and hard to do so incorrectly
Set IAM standards across the engineering org and act as the domain expert on access-sensitive architecture decisions

Benefits

100% coverage of platinum medical, dental, vision, and life insurance plans for employees
401k
Relocation stipend if you’re moving from outside of LA
Flexible vacation policy

Preferred experience

Bachelor’s degree in Computer Science or related field, or equivalent experience
Deep, hands-on expertise in modern auth protocols: OAuth 2.0, OpenID Connect (OIDC), SAML, and SCIM
Security-first mindset: you understand threat modeling, risk assessment, and least-privilege principles, and you embed security throughout the SDLC
Experience designing IAM systems across multi-cloud environments (AWS, GCP, Azure)
Ability to set technical direction independently, write clear design docs, and drive alignment across teams
Comfort working alongside a PM counterpart — you can divide technical and product ownership clearly and collaborate effectively
Proficiency in Go, Python, or similar; track record of writing high-quality, maintainable code
8–12+ years in software engineering, with 3+ years of focused experience in identity, authentication, or authorization systems at scale
Strong understanding of access control models — RBAC, ABAC, and ReBAC — and the ability to make sound architectural tradeoffs between them
Experience building IAM systems that serve external developer ecosystems — not just internal users
Experience building identity systems for non-human entities: service accounts, workload identity, machine certificates, Kubernetes service accounts
Familiarity with policy-as-code frameworks (OPA, Casbin, or similar)
Experience with zero-trust network architecture
Prior experience in aerospace, defense, or manufacturing environments with ITAR or export control considerations
Hands-on experience with secrets management platforms (Vault or equivalent) at scale
Experience working alongside a PM on a developer-facing platform product