Software Engineer, Identity & Access Management

Responsibilities

• Design scalable authentication and authorization systems for human and machine identities across cloud, factory-floor, and API-platform environments.
• Own SSO, MFA, OIDC/SAML integrations, and service-to-service authentication across AWS, GCP, Azure, and future cloud environments.
• Build fine-grained RBAC, ABAC, and ReBAC systems for internal teams, factory systems, and external API partners.
• Develop frameworks, APIs, CLI tools, SDKs, and documentation for credential provisioning, rotation, policy enforcement, and IAM integration.
• Build identity models for machine-to-machine communication across Kubernetes workloads, factory systems, and cloud services.
• Partner with Security on compliance, audit requirements, threat modeling, and complex identity and access issues.
• Set IAM standards and technical direction across the engineering organization and define developer-friendly IAM product experiences with the API Platform PM.

Requirements

• 8–12+ years of software engineering experience, including 3+ years focused on identity, authentication, or authorization systems at scale.
• Deep hands-on expertise with OAuth 2.0, OpenID Connect, SAML, and SCIM.
• Strong understanding of RBAC, ABAC, and ReBAC and the ability to make architectural tradeoffs between them.
• Experience designing IAM systems across AWS, GCP, and Azure multi-cloud environments.
• Understanding of threat modeling, risk assessment, least-privilege principles, and security throughout the software development lifecycle.
• Proficiency in Go, Python, or a similar language and a track record of writing maintainable code.
• Ability to set technical direction independently, write design documentation, and drive cross-team alignment.
• Bachelor’s degree in Computer Science or a related field, or equivalent experience.
• Preferred experience with external developer ecosystems, non-human identities, Kubernetes service accounts, policy-as-code frameworks such as OPA or Casbin, zero-trust architecture, Vault or equivalent secrets-management platforms, and aerospace, defense, or manufacturing environments.

Benefits

• Medical, dental, vision, and life insurance plans are available for full-time employees.
• 401(k) benefits are provided.
• Relocation support may be available in certain situations based on business need.
• Flexible vacation policy.
• Equity is offered.