Software Engineer, Identity & Access Management
Staff software engineer who owns identity and access management for Hadrian's API Platform — building authentication, authorization, and credential automation across AWS/GCP, Kubernetes, and factory-floor systems. Core stack: OAuth 2.0/OIDC/SAML/SCIM, RBAC/ABAC/ReBAC, Go or Python, and multi-cloud IAM design.
- Compensation
- $192.5K–$273.5K / yr
- Location
- Los Angeles, United States
- Work setup
- Onsite
- Seniority
- Staff
- Employment
- Full time
- Experience
- 3+ years
- Category
- Software engineering
- Posted
Skills
Must have
- 8–12+ years in software engineering, with 3+ years focused on identity, authentication, or authorization systems at scale
- Deep hands-on expertise in OAuth 2.0, OpenID Connect (OIDC), SAML, and SCIM
- Strong understanding of RBAC, ABAC, and ReBAC access control models and their architectural tradeoffs
- Experience designing IAM systems across multi-cloud environments (AWS, GCP, Azure)
- Security-first mindset: threat modeling, risk assessment, least-privilege principles, embedding security in the SDLC
- Proficiency in Go, Python, or similar with a track record of maintainable code
- Ability to set technical direction independently, write clear design docs, and drive alignment across teams
- Comfort working alongside a PM counterpart and dividing technical/product ownership
- Bachelor's degree in Computer Science or related field, or equivalent experience
- ITAR eligibility: U.S. citizen/national, lawful permanent resident, protected individual, or able to obtain required State Department authorizations
Nice to have
- Experience building IAM systems for external developer ecosystems, not just internal users
- Experience with identity for non-human entities: service accounts, workload identity, machine certificates, Kubernetes service accounts
- Familiarity with policy-as-code frameworks (OPA, Casbin, or similar)
- Experience with zero-trust network architecture
- Hands-on experience with secrets management platforms (Vault or equivalent) at scale
- Prior experience in aerospace, defense, or manufacturing environments with ITAR or export control considerations
- Experience working alongside a PM on a developer-facing platform product
Full description
Hadrian - Manufacturing the Future
Hadrian is building autonomous factories to reindustrialize America. By combining AI, advanced software, robotics, and full-stack manufacturing, we help aerospace and defense companies build rockets, satellites, aircraft, ships, and other mission-critical systems up to 10x faster and at significantly lower cost.
Following our $1.37B Series D at a $7.87B valuation, Hadrian is rapidly expanding our manufacturing footprint, launching new capabilities across welding, casting, forging, electronics, additive manufacturing, and more, while scaling our Factory-as-a-Service platform to transform how critical products are built.
Backed by leading investors including JPMorgan Chase, Valor Equity Partners, Andreessen Horowitz, Founders Fund, 137 Ventures, Lux Capital, T. Rowe Price, and Morgan Stanley, we’re building the future of American manufacturing—and looking for exceptional people to help make it happen.
If you’re ready to take on the most challenging and rewarding work of your career while helping create American manufacturing jobs for generations to come, you’re exactly who we’re looking for.
The Role
Hadrian's API Platform is how the outside world connects to our manufacturing systems. Every partner integration, every internal service, and every factory floor system that touches that platform depends on one thing being right: identity. Who is allowed in, what they can do, and how credentials are managed across a complex, multi-cloud, physically distributed environment.
As Staff Software Engineer, Identity and Access Management, you will build the security foundation that the API Platform is built on. You will own authentication, authorization, and credential automation across cloud infrastructure, Kubernetes workloads, and factory floor systems — and you will work in close partnership with the API Platform PM to ensure that IAM capabilities are surfaced as first-class developer experiences, not bolted-on compliance requirements.
This is not a supporting role. IAM is a product pillar here. You will own the technical layer end to end, set the direction for how it scales, and help define what secure-by-default looks like across everything Hadrian builds.
What You'll Do
- Design and implement scalable authentication and authorization systems covering both human operators and machine identities across cloud and factory floor environments — serving as the security foundation for the API Platform
- Own Hadrian's authentication stack: SSO, MFA, OIDC/SAML integrations, and service-to-service auth across AWS, GCP, and future cloud environments
- Build fine-grained access control systems (RBAC/ABAC/ReBAC) that scale across internal engineering teams, factory systems, and external API partners