Software Engineer, Identity & Access Management

Hadrian - Manufacturing the FutureHadrian is building autonomous factories that help aerospace and defense companies manufacture rockets, satellites, jets, and ships up to 10x faster and up to 2x cheaper. By combining advanced software, robotics, and full-stack manufacturing, we are reinventing how America produces its most critical parts.We’re accelerating our mission with the launch of Factory 3 in Mesa, Arizona, a 290,000-square-foot facility creating 350 new jobs. We are expanding rapidly to support thousands of future hires, launching Hadrian Maritime to expand into naval production, and introducing a Factory-as-a-Service model that delivers complete systems instead of individual parts.Hadrian is backed by leading investors including T. Rowe Price, Lux Capital, Founders Fund, and Andreessen Horowitz, our fast-growing team is united around reindustrializing American manufacturing for the 21st century and beyond.The RoleHadrian's API Platform is how the outside world connects to our manufacturing systems. Every partner integration, every internal service, and every factory floor system that touches that platform depends on one thing being right: identity. Who is allowed in, what they can do, and how credentials are managed across a complex, multi-cloud, physically distributed environment.As Staff Software Engineer, Identity and Access Management, you will build the security foundation that the API Platform is built on. You will own authentication, authorization, and credential automation across cloud infrastructure, Kubernetes workloads, and factory floor systems — and you will work in close partnership with the API Platform PM to ensure that IAM capabilities are surfaced as first-class developer experiences, not bolted-on compliance requirements.This is not a supporting role. IAM is a product pillar here. You will own the technical layer end to end, set the direction for how it scales, and help define what secure-by-default looks like across everything Hadrian builds.What You'll DoDesign and implement scalable authentication and authorization systems covering both human operators and machine identities across cloud and factory floor environments — serving as the security foundation for the API PlatformOwn Hadrian's authentication stack: SSO, MFA, OIDC/SAML integrations, and service-to-service auth across AWS, GCP, and future cloud environmentsBuild fine-grained access control systems (RBAC/ABAC/ReBAC) that scale across internal engineering teams, factory systems, and external API partnersDevelop frameworks, APIs, and CLI tools that automate credential provisioning, rotation, and policy enforcement for both internal teams and external API consumersBuild identity and access models for machine-to-machine communication across factory floor systems, Kubernetes workloads, and cloud servicesPartner with Security to ensure IAM systems meet compliance and audit requirements; troubleshoot complex identity and access issues across distributed systemsWork with the API Platform PM to define how IAM capabilities are surfaced as developer-friendly product experiences — for internal engineers and external partners alikeBuild tooling, SDKs, and documentation that make it easy to integrate with IAM correctly and hard to do so incorrectlySet IAM standards across the engineering org and act as the domain expert on access-sensitive architecture decisionsWhat We're Looking For8–12+ years in software engineering, with 3+ years of focused experience in identity, authentication, or authorization systems at scaleDeep, hands-on expertise in modern auth protocols: OAuth 2.0, OpenID Connect (OIDC), SAML, and SCIMStrong understanding of access control models — RBAC, ABAC, and ReBAC — and the ability to make sound architectural tradeoffs between themExperience designing IAM systems across multi-cloud environments (AWS, GCP, Azure)Security-first mindset: you understand threat modeling, risk assessment, and least-privilege principles, and you embed security throughout the SDLCProficiency in Go, Python, or similar; track record of writing high-quality, maintainable codeAbility to set technical direction independently, write clear design docs, and drive alignment across teamsComfort working alongside a PM counterpart — you can divide technical and product ownership clearly and collaborate effectivelyBachelor's degree in Computer Science or related field, or equivalent experienceWhat Will Set You ApartExperience building IAM systems that serve external developer ecosystems — not just internal usersExperience building identity systems for non-human entities: service accounts, workload identity, machine certificates, Kubernetes service accountsFamiliarity with policy-as-code frameworks (OPA, Casbin, or similar)Experience with zero-trust network architectureHands-on experience with secrets management platforms (Vault or equivalent) at scalePrior experience in aerospace, defense, or manufacturing environments with ITAR or export control considerationsExperience working alongside a PM on a developer-facing platform productGrowth & TrajectoryThis is a founding role with a clear path upward. As Hadrian's API Platform scales and the IAM function grows in complexity — more factory locations, more partners, more systems — so does the scope of this role. The natural trajectory leads toward technical lead or architect of a broader Security and Identity platform org, with the potential to grow a team around you.CompensationFor this role, the target salary range is $192,000-$273,500, plus offers equity.This is the lowest to highest salary we reasonably and in good faith believe we would pay for this role at the time of this posting. We may ultimately pay more or less than the posted range, and the range may be modified in the future. An employee's pay position within the salary range will be based on several factors, including, but not limited to, relevant education, qualifications, certifications, experience, skills, geographic location, performance, and business or organizational needs.Benefits for Full-time EmployeesMedical, dental, vision, and life insurance plans for employees401kRelocation support may be provided for certain situations, based on business need.Flexible vacation policyEquityITAR RequirementsTo conform to U.S. Government space technology export regulations, including the International Traffic in Arms Regulations (ITAR) you must be a U.S. citizen, lawful permanent resident of the U.S., protected individual as defined by 8 U.S.C. 1324b(a)(3), or eligible to obtain the required authorizations from the U.S. Department of State. Learn more about the ITAR here.Use of AI in hiringHadrian uses AI-assisted tools in our recruiting and hiring processes to help our team work more efficiently. This may include tools that help organize and analyze recruiting data, as well as an AI-powered notetaker that can record and transcribe interviews and help coordinate feedback. These tools support our team and are not used to make hiring decisions. All candidate evaluations and hiring decisions are performed by humans. If an interview will be recorded, you will be notified in advance and may opt out at any time with no impact on your candidacy. Candidate data processed through these tools is subject to the same protections described in our Privacy Policy.Hadrian Is An Equal Opportunity EmployerIt is the Company’s policy to provide equal employment opportunity for all applicants and employees. The Company does not unlawfully discriminate on the basis of race inclusive of traits historically associated with race (including, but not limited to, hair texture and protective hairstyles, such as braids, locks and twists), color, religion, sex (including pregnancy, childbirth, or related medical conditions), gender identity, gender expression, transgender status, national origin (including, in California, possession of a drivers license), ancestry, citizenship, age, physical or mental disability, height or weight, medical condition, family care status, military or veteran status, marital status, domestic partner status, sexual orientation, genetic information, exercise of reproductive rights, any other basis protected by local, state, or federal laws, or any combination of the above characteristics. When necessary, the Company also makes reasonable accommodations for disabled candidates and employees, including for candidates or employees who are disabled by pregnancy, childbirth, or related medical conditions.Compensation Range: $192.5K - $273.5KLocationLos Angeles, CA; San Francisco Bay Area, CA; Seattle/Bellevue Area, WAEmployment TypeFull timeLocation TypeOn-siteDepartmentEngineering, Product, DesignCompensation$192.5K – $273.5K • Offers Equity