Software Engineer (Identity and Access Management)

Join Hadrian, a cutting-edge aerospace and defense startup, as a Staff Software Engineer specializing in Identity and Access Management (IAM). In this role, you will build the security foundation for our API Platform, owning authentication, authorization, and credential automation across cloud infrastructure, Kubernetes workloads, and factory floor systems. You will work closely with the API Platform PM to ensure IAM capabilities are integrated as first-class developer experiences. This is a key position that will shape the direction of IAM at Hadrian and define what secure-by-default looks like across all our products.

Missions

• Design and implement scalable authentication and authorization systems covering both human operators and machine identities across cloud and factory floor environments.
• Own Hadrian's authentication stack: SSO, MFA, OIDC/SAML integrations, and service-to-service auth across AWS, GCP, and future cloud environments.
• Build fine-grained access control systems (RBAC/ABAC/ReBAC) that scale across internal engineering teams, factory systems, and external API partners.

Profil recherché

- Deep, hands-on expertise in modern auth protocols: OAuth 2.0, OpenID Connect (OIDC), SAML, and SCIM

- Security-first mindset: you understand threat modeling, risk assessment, and least-privilege principles, and you embed security throughout the SDLC

- Experience designing IAM systems across multi-cloud environments (AWS, GCP, Azure)

- Ability to set technical direction independently, write clear design docs, and drive alignment across teams

- Comfort working alongside a PM counterpart - you can divide technical and product ownership clearly and collaborate effectively

- Proficiency in Go, Python, or similar; track record of writing high-quality, maintainable code

- 8-12+ years in software engineering, with 3+ years of focused experience in identity, authentication, or authorization systems at scale

- Strong understanding of access control models - RBAC, ABAC, and ReBAC - and the ability to make sound architectural tradeoffs between them

- Experience building IAM systems that serve external developer ecosystems - not just internal users

- Experience building identity systems for non-human entities: service accounts, workload identity, machine certificates, Kubernetes service accounts

- Familiarity with policy-as-code frameworks (OPA, Casbin, or similar)

- Experience with zero-trust network architecture

- Prior experience in aerospace, defense, or manufacturing environments with ITAR or export control considerations

- Hands-on experience with secrets management platforms (Vault or equivalent) at scale

- Experience working alongside a PM on a developer-facing platform product