Staff Security Engineer

Staff Security Engineer

Location: Hybrid in one of these places 2 days a week: Orange County, CA, Seattle, WA, Columbus, OH, or DC (So must be in the nearby area of these locations only) Mode of interview: 2 Virtual Interviews

Job Description

Summary The Application and Security Engineering team is looking for a Staff Security Engineer to focus on identity and access management and build and maintain world-class defensive controls to protect the systems we use to build our advanced defense technology products.

Responsibilities

• Build an identity engine that powers the whole company and supercharges our security program
• Create applications that enable and enforce our identity framework across the company
• Develop integrations that unify identities across IdPs, cloud providers, SaaS tools, and internal systems
• Automate identity lifecycle operations, including provisioning, access reviews, and offboarding
• Collaborate with other IAM engineers and partner teams to define architecture and ship iteratively

Required Qualifications

• Strong programming ability in one or more general-purpose languages (Go, Rust, etc.)
• Experience with one or more infrastructure-as-code languages (e.g., Terraform, AWS CDK) in a production capacity
• Experience with identity protocols (SAML, OIDC, SCIM, OAuth) or identity providers (Okta, Azure AD, etc.)
• Proven ability to translate system design requirements into clean, maintainable implementations
• Experience leading or contributing to architecture and design reviews
• Experience working with cloud platforms and deploying applications through CI/CD pipelines
• Ability to work autonomously, take ownership of projects, and collaborate across teams
• Eligible to obtain and maintain a U.S. TS clearance
• Experience working in environments with complex identity or access issues, including troubleshooting across distributed systems is preferred
• Familiarity with RBAC, ABAC, or policy-as-code frameworks (e.g., OPA, Cedar)- preferred
• Experience building bespoke solutions in high-growth and high-complexity environments is preferred
• Experience with AWS, Azure, or GCP ecosystems and tooling is highly preferred