{"id":3844754,"url":"https://alion.io/job/aalyria-software-engineer-security-platform","title":"Software Engineer, Security Platform","company":{"id":668833,"name":"Aalyria","domain":"aalyria.com","url":"https://alion.io/company/aalyria","size_band":"51-200","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Rippling","truth_index":{"grade":"A","score":89,"open_postings":9,"ghost_share":0,"stale_share":0.222,"repost_share":0,"time_to_fill_p50_days":94,"computed_at":"2026-11-06T05:58:05Z"}},"role":"Backend","role_family":"Backend","seniority":"senior","employment_type":"full_time","work_mode":"remote","remote_scope":"stated_countries","remote_scope_basis":"board_field","remote_working_hours":null,"hiring_geo_confidence":"structured","locations":[],"countries":[],"hiring_countries":["US"],"hiring_countries_total":1,"salary":null,"salary_estimate":null,"experience_years_min":5,"visa_sponsorship":false,"relocation_package":false,"has_equity":true,"technologies":[{"name":"Go","optional":false},{"name":"Kubernetes","optional":false},{"name":"PKI","optional":false},{"name":"Auth0","optional":true},{"name":"FedRAMP","optional":true},{"name":"Keycloak","optional":true},{"name":"Okta","optional":true},{"name":"Threat Modeling","optional":true}],"status":"live","first_seen_at":"2026-11-05T23:32:33Z","employer_posted_date":"2026-11-05","last_verified_at":"2026-11-06T22:43:45Z","board_verified":true,"closed_at":null,"days_open":1,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":1},"description":"About Aalyria:\nAalyria is a leading technology company that supplies laser communications technology and temporospatial software-defined networking platforms to the aerospace industry. With technology acquired from Google, Aalyria is at the forefront of innovation in satellite and airborne mesh networks, as well as cislunar and deep-space communications. We are revolutionizing the orchestration and management of planetary mesh networks using any radio or optical spectrum, any orbit, and any hardware across land, sea, air, and space.\nRole Overview:\nAs a Software Engineer on the Security Platform team, you'll build the identity, credentials, and audit capabilities that secure Spacetime. The team owns security for Aalyria products, and we build each capability once so it works the same in every environment Spacetime ships into. A system built this way produces its own compliance evidence. You'll work with senior engineers on the team and with product engineers across Aalyria.\nSpacetime runs in commercial cloud, government cloud, and classified or disconnected environments, and that last category shapes the work. Trust decisions must be verifiable offline, at sites we cannot reach, with no upstream to call. Most identity platforms assume a connected world. Ours cannot. Our security platform is evolving, with capabilities that grew up alongside Spacetime being consolidated into one coherent layer with identity at its center, and the engineers we hire now will help build it. The people who thrive here are curious about how security systems fail, care about getting the details right, and take ownership of what they ship.\nKey Responsibilities:\nBuild authentication and authorization capabilities for Spacetime, including token validation, trust anchors, and the permission model operators configure\nImplement authorization that holds up under delegation, multi tenancy, and machine to machine access\nBuild and maintain PKI components: certificate issuance, rotation, and revocation\nBuild workload identity and the libraries services use to present it\nBuild and maintain the auth SDKs that Aalyria engineering teams and customers use to reach Spacetime APIs\nBuild the access controls for secrets and keys, and the client libraries teams use to reach them\nImplement audit and structured logging that makes authorization decisions reconstructable after the fact, including in regulated, classified, and disconnected environments\nContribute to threat models and build mitigations that fix root causes rather than single findings\nRun what you build in production: availability, upgrades, security maintenance, on call, and incident response\nWork with product, infrastructure, and developer platform engineers to turn their requirements into capabilities they adopt on their own, and apply the platform's security standards for hardened images, supply chain, and pipeline gates\nRequired Qualifications:\n5+ years of backend software engineering on production services\nExperience in Go, or backend experience in a comparable language and readiness to work in Go daily\nHands on experience contributing to at least one of: an authentication or authorization system inside a product, an identity provider integration, a certificate authority, or a secrets or key management service\nUnderstanding of how token based authentication fails, including audience confusion, unverified issuers, key confusion, and redirect handling at token endpoints, and how to prevent those failures\nWorking knowledge of Kubernetes and cloud infrastructure\nComfort owning a component in production, including on call rotations and incident response\nClear written and verbal communication, including explaining security tradeoffs to other engineers\nPreferred Qualifications:\nExperience building for regulated, disconnected, or high assurance environments\nExperience integrating or operating an OIDC provider such as Zitadel, Keycloak, Okta, Auth0, or comparable\nExperience with authorization models such as policy engines, RBAC, or ReBAC\nExperience with SPIFFE/SPIRE, Vault, cloud KMS, or HSM backed key management\nExperience with audit logging or evidence generation for FedRAMP, DoD Impact Levels, or a comparable regime\nExperience threat modeling the services you build\nBachelor's degree in Computer Science or a related technical field, or equivalent practical experience\nWhat We Offer:\nInnovative Environment: Work at a cutting-edge company shaping the future of aerospace communications.\nImpactful Work: Directly contribute to critical national security programs and initiatives.\nGrowth Opportunities: Expand your career with opportunities for professional development and advancement.\nInclusive Culture: Be part of a collaborative, supportive, and inclusive workplace where your contributions matter.\nFlexibility: Flexible working arrangements including hybrid remote/in-office schedules.\nCompensation and Equity: Competitive salary, comprehensive benefits (401(k), dental, vision, health, life insurance), paid time off, and equity options.\nITAR/EAR Requirements:\nThis position involves access to export-controlled information. To comply with U.S. government export regulations, applicants must meet one of the following criteria:\n(A) Qualify as a U.S. person, which includes:\nU.S. citizen or national\nU.S. lawful permanent resident (green card holder)\nRefugee under 8 U.S.C. 1157\nAsylee under 8 U.S.C. 1158\n(B) Be eligible to access export-controlled information without requiring an export authorization.\n(C) Be eligible and reasonably likely to obtain the necessary export authorization from the appropriate U.S. government agency.\nThe company reserves the right to decline pursuing an export licensing process for legitimate business-related reasons.\nEqual Opportunity Employer Statement:\nAalyria is an Equal Opportunity Employer. We celebrate diversity and are committed to creating an inclusive environment for all employees. We do not discriminate based on race, color, religion, sex (including pregnancy, gender identity, and sexual orientation), national origin, age, disability status, genetic information, protected veteran status, or any other characteristic protected by law. Qualified applicants from all backgrounds are encouraged to apply.","description_format":"text","description_chars":6249,"description_truncated":false,"requirements":{"experience_years_min":5,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":true,"languages":[]},"benefits":["Equity","Flexible schedule","Growth opportunities","Life insurance","Professional development"],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Telecom Infrastructure"],"lifecycle":[{"event":"open","at":"2026-11-06T00:20:10Z"}],"visa":[{"country":"US","licensed_sponsor":true,"adverts_offering_sponsorship_24m":0,"sanctioned_now":false,"evidence":"H-1B filings in 12 months: 1","filings_12m":1,"filings_prev_12m":0,"green_card_filings_12m":0,"median_offered_wage_usd":187500,"route":null,"cap_exempt":false,"checked_at":"2026-11-06T22:30:08+00:00","sources":["US Department of Labor: LCA disclosure data (H-1B, H-1B1, E-3)"],"filings_for_role_12m":0}],"liveness":{"score":86,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.86,"p_room":1,"age_days":0,"expected_fill_days":94,"reasons":["conf:0","win:early"],"computed_at":"2026-11-06T05:58:05Z"},"pay":null,"html_url":"https://alion.io/job/aalyria-software-engineer-security-platform","json_url":"https://alion.io/job/aalyria-software-engineer-security-platform.json","meta":{"generated_at":"2026-11-07T00:18:52Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":782,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-08T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":668833},"rest":"https://alion.io/mcp/rest/get_company?id=668833"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Faalyria-software-engineer-security-platform"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Faalyria-software-engineer-security-platform"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Faalyria-software-engineer-security-platform"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/aalyria-software-engineer-security-platform\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Faalyria-software-engineer-security-platform"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3844754}},{"tool":"search_jobs","arguments":{"company":"aalyria.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3844754},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}