jobapplier

Software Engineer (Identity)

Hadrian

Skills

Required

  • Azure service principals
  • AWS IAM
  • Okta / Entra / Google Workspace / Auth0 / Zitadel
  • OAuth
  • OIDC
  • SAML
  • RBAC
  • ReBAC
  • IdPs
  • core identity
  • 2.0 flows
  • relationship-based access control
  • design systems
  • software engineering
  • configuring a vendor tool

Preferred

  • SSO

Join our team as a Senior Identity Engineer, where you will take ownership of workforce and workload identity across various systems. You will design, implement, and operate our identity provider stack, build identity systems at scale, and work cross-functionally to meet identity needs. This is a hands-on individual-contributor role on a small, high-leverage security team in Los Angeles.

Responsibilities

  • Conception, mise en œuvre et exploitation de notre pile IdP (par exemple, Okta, Entra, Google Workspace, Auth0 ou Zitadel) - SSO, SCIM provisioning et MFA résistant au phishing.

Requirements

  • Construction de systèmes d'identité à grande échelle qui mettent en œuvre OAuth 2.0 / OIDC / SAML et des modèles d'autorisation modernes (RBAC et contrôle d'accès basé sur les relations).
  • Responsabilité de l'identité cloud de bout en bout - Azure service principals, AWS IAM, et identité de charge de travail/service.
  • Hands-on depth with one or more IdPs (Okta / Entra / Google Workspace / Auth0 / Zitadel), since day-to-day is implementing, designing, and integrating these platforms
  • Real command of core identity concepts — OAuth 2.0 flows, OIDC, SAML, RBAC, and relationship-based access control (ReBAC) — and the ability to design systems that exploit these protocols well
  • Cloud identity depth — Azure service principals, AWS IAM — and a clear grasp of how those identities map to real infrastructure
  • You can build. Strong software engineering fundamentals and a track record of shipping identity systems at scale — not just configuring a vendor tool or leaning on AI-assisted coding
  • The autonomy and urgency to own the identity domain end-to-end on a small, high-leverage team with minimal direction
  • Fine-grained authorization at scale (ReBAC with OpenFGA / Zanzibar-style systems) built and run in production
  • Identity engineering for OT/manufacturing or other regulated, controlled environments
  • Large-scale passkey/FIDO2 or PAM (CyberArk/Teleport) rollouts, and secrets management with HashiCorp Vault
  • Experience building on a small, high-automation team where output-per-engineer is the measure; detection-engineering and ITAR-aware access design

Pay

USD 170,000 - 200,000