{"id":1531810,"url":"https://alion.io/job/vantor-software-engineering-manager-of-platform-authentication-authorization","title":"Software Engineering Manager of Platform Authentication & Authorization","company":{"id":15008,"name":"Vantor","domain":"vantor.com","url":"https://alion.io/company/vantor","size_band":"201-500","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workday","truth_index":{"grade":"B","score":78,"open_postings":8,"ghost_share":0,"stale_share":0.875,"repost_share":0,"time_to_fill_p50_days":37,"computed_at":"2026-10-01T05:45:00Z"}},"role":"Leadership","role_family":"Leadership","seniority":"lead","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Westminster, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":122000,"max":162000,"currency":"USD","period":"year","gross":null,"usd_annual":162000},"salary_estimate":null,"experience_years_min":7,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Agile","optional":false},{"name":"CI/CD","optional":false},{"name":"Incident Management","optional":false},{"name":"ISO 27001","optional":false},{"name":"Keycloak","optional":false},{"name":"Rest API","optional":false},{"name":"Threat Modeling","optional":false},{"name":"TypeScript","optional":false},{"name":"Vue.js","optional":false},{"name":"Amazon CloudWatch","optional":true},{"name":"Amazon EKS","optional":true},{"name":"Angular","optional":true},{"name":"AWS","optional":true},{"name":"Grafana","optional":true},{"name":"Java","optional":true},{"name":"JavaScript","optional":true},{"name":"Kubernetes","optional":true},{"name":"Least Privilege","optional":true},{"name":"OpenTelemetry","optional":true},{"name":"React.js","optional":true},{"name":"Spring Boot","optional":true},{"name":"SQL","optional":true}],"status":"live","first_seen_at":"2026-09-30T16:34:17Z","employer_posted_date":"2026-09-30","last_verified_at":"2026-10-01T10:45:21Z","board_verified":true,"closed_at":null,"days_open":1,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":1},"description":"Vantor is forging the new frontier of spatial intelligence, helping decision makers and operators navigate what’s happening now and shape what’s coming next. Vantor is a place for problem solvers, changemakers, and go-getters-where people are working together to help our customers see the world differently, and in doing so, be seen differently. Come be part of a mission, not just a job, where you can: Shape your own future, build the next big thing, and change the world.\nTo be eligible for this position, you must be a U.S. Citizen. This position requires an active U.S. Government security clearance, applicants who do not currently hold the required clearance will not be eligible for consideration. Employment for cleared roles is contingent upon verification of clearance status.\n\nExport Control/ITAR: Certain roles may be subject to U.S. export control laws, requiring U.S. person status as defined by 8 U.S.C. 1324b(a)(3).\nPlease review the job details below.\nVantor is seeking a Manager of Software Engineering to lead the Platform Authentication & Authorization team. The team designs, builds, tests, delivers, and operates the identity and access capabilities that support users, administrators, and products across the platform.\nThe Role\nThis role combines people leadership, technical direction, and delivery accountability. The Manager will establish priorities, develop engineers, allocate team capacity, and ensure that the team delivers secure, scalable, and reliable software. The role requires close partnership with Engineering, Product, Security, Compliance, customers, and other functional teams to turn business and technical objectives into executable plans and successful outcomes.\nThis is a high-ownership role with a strong security and identity focus. The team's work directly affects every platform user and the administrators responsible for managing access. The ideal candidate will bring practical expertise in modern authentication and authorization, including OAuth 2.0, OpenID Connect (OIDC), MFA, SSO, federation, token lifecycle management, claims, scopes, and policy enforcement. You are comfortable guiding decisions in complex, distributed systems while empowering engineers to own solution design and implementation.\nVantor is an AI-forward engineering organization. We use AI-assisted development tools for design exploration, implementation, testing, documentation, threat-model checklists, migration planning, troubleshooting, and other repetitive engineering work. The Manager will help the team use these tools responsibly, with appropriate human review, validation, and security-aware engineering judgment.\nThis position is located in Westminster. Candidates must be U.S. citizens.\nWhat You’ll Do\nLead the Team and Deliver Results\nLead, coach, and develop a team of software engineers with varied skills and areas of expertise.\nEstablish team goals, performance expectations, development plans, and accountability; provide timely, meaningful feedback.\nTranslate organizational and product objectives into clear engineering priorities, plans, schedules, and measurable outcomes.\nPlan staffing and capacity, identify skill gaps, allocate resources, and support budget and cost objectives as appropriate.\nPartner with Product Management and stakeholders to clarify requirements, evaluate priorities and tradeoffs, and translate business needs into executable engineering work.\nIdentify risks, dependencies, resource constraints, and competing priorities early; drive decisions and resolution.\nCoordinate work across engineering teams and functional organizations when delivery requires shared ownership or dependencies.\nGuide the team through complex software design, development, integration, testing, deployment, and production-support challenges.\nImprove engineering processes, practices, and operating procedures to strengthen delivery, quality, and team effectiveness.\nFoster a culture of ownership, collaboration, accountability, technical excellence, and continuous improvement.\nLead the Platform Identity and Access Domain\nOversee services supporting user identity, account lifecycle, access control, product entitlements, policy enforcement, and administrator workflows.\nGuide the design and implementation of OAuth 2.0 and OIDC flows, including authorization code with PKCE, client credentials, refresh tokens, token validation, token revocation, claims, scopes, and service-to-service authentication.\nDeliver secure MFA, SSO, federation, identity brokering, external identity-provider integration, and session-management capabilities.\nConfigure, extend, and operate Keycloak, including realms, clients, roles, groups, protocol mappers, identity providers, administrative APIs, custom extensions, and production-support patterns.\nGuide development of the TypeScript/Vue 3 administrator application used to manage users, accounts, permissions, and policy-driven access.\nEnsure identity and access services are designed for appropriate availability, performance, observability, auditability, and operational support.\nPartner with Security and Compliance to apply threat modeling, secure SDLC practices, audit logging, secrets management, access reviews, vulnerability remediation, and relevant control expectations, including NIST, ISO 27001, and CMMC.\nSupport capabilities that capture and surface platform usage and access data for reporting, billing, analytics, and operational insight.\nPromote and oversee AI-assisted engineering for implementation, test generation, documentation, troubleshooting, and design analysis, with disciplined validation and human review.\nMinimum Requirements\nU.S. citizenship and willingness and ability to obtain a U.S. Government security clearance.\nBachelor’s degree in Computer Science, Software Engineering, Systems Engineering, or a related technical discipline; four additional years of relevant experience may substitute for the degree.\nSeven or more years of professional software engineering experience, including significant ownership of production systems.\nAt least two years of engineering-management experience, or equivalent technical-leadership experience with responsibility for mentoring engineers, coordinating delivery, and leading through complex technical challenges.\nExperience leading, coaching, and developing engineers, including setting goals, establishing expectations, and providing performance feedback.\nExperience working in an Agile engineering environment, including practices such as test-driven development, behavior-driven development, continuous integration, and continuous delivery.\nExperience leading software modernization efforts or developing new product capabilities in complex technical environments.\nStrong understanding of the software development lifecycle, from requirements and architecture through development, testing, deployment, operations, and support.\nDemonstrated ability to guide the design of scalable, performant, and highly available cloud services, distributed systems, or microservice-oriented architectures.\nStrong understanding of production service operations, including SLAs, SLOs, incident management, observability, and operational readiness.\nPractical application of secure software design and delivery practices, such as threat modeling, audit logging, secrets handling, access-review workflows, vulnerability remediation, and secure SDLC controls.\nExperience building and consuming REST APIs with appropriate versioning, validation, authorization checks, observability, and error handling.\nStrong communication, judgment, and collaboration skills, with the ability to evaluate technical and organizational tradeoffs and influence across teams.\nExperience working with AI-assisted development tools, with disciplined validation and security-aware review of generated output.\nPreferred Qualifications\nHands-on experience with Keycloak, including realm and client configuration, identity-provider integration, protocol mappers, roles and groups, administrative APIs, or identity-extension development.\nDeep practical knowledge of OAuth 2.0 and OIDC, including authorization code with PKCE, client credentials, refresh-token handling, JWT validation, key rotation, scopes, claims, token lifetimes, and revocation patterns.\nStrong working knowledge of Java and Spring Boot, including the broader Spring ecosystem.\nExperience with modern authentication and authorization practices, including MFA, SSO, federation, RBAC, ABAC or policy-based access control, identity lifecycle management, service accounts, and least-privilege design.\nExperience with relational databases, SQL, schema-migration tooling, and event-driven architectures using a message broker.\nExperience with TypeScript and a modern frontend framework such as Vue, React, or Angular.\nDevelopment and architecture experience with AWS and related cloud services.\nExperience with Kubernetes or EKS, service meshes, multi-service environments, and hybrid deployments.\nStrong background in observability technologies such as Elastic, Grafana, OpenTelemetry, or AWS CloudWatch.\nWhat Success Looks Like\nSuccess in this role means building a strong software engineering team that delivers reliably, owns its commitments, makes sound technical decisions, and works effectively across organizational boundaries.\nThis Manager will balance people leadership, technical judgment, delivery, resources, schedules, and business priorities while creating an environment in which engineers can perform at a high level.\nVantor values diversity in the workplace and is an equal opportunity/affirmative action employer. All qualified applicants will receive consideration for employment without regard to sex, gender identity, sexual orientation, race, color, religion, national origin, disability, protected veteran status, age, or any other characteristic protected by law.\nPay Transparency: To support pay transparency, Vantor includes salary ranges in all U.S. job postings. Starting pay for this role will fall within the listed range and will be based on factors such as experience, qualifications, skills, location, and market conditions. Candidates who meet the minimum requirements for the role should not expect to receive compensation at the top of the range. The listed range reflects the expected pay for this position, and final offers will be determined based on each candidate’s experience, expertise, and alignment with the role.\n•The base pay for this position within Colorado is: $122,000.00 - $162,000.00 - $178,200.00 annually.For all other states, we use geographic cost of labor as an input to develop market-driven ranges for our roles, and as such, each location where we hire may have a different range.\nBenefits: Vantor offers a competitive total rewards package that goes beyond the standard, including a robust 401(k) with company match, mental health resources, and unique perks like student loan repayment assistance, adoption reimbursement and pet insurance to support all aspects of your life. You can find more information on our benefits at: https://www.Vantor.com/careers\nAdditionally, this position is incentive eligible with a target based on contribution, company performance, and/or individual results achieved; the specific incentive plan and target amount will be determined based on the role and breadth of contributions.The application window is three days from the date the job is posted and will remain posted until a qualified candidate has been identified for hire. If the job is reposted regardless of reason, it will remain posted three days from the date the job is reposted and will remain reposted until a qualified candidate has been identified for hire.\nThe date of posting can be found on Vantor's Career page at the top of each job posting.\nTo apply, submit your application via Vantor's Career page.\nEEO Policy: Vantor is an equal opportunity employer committed to an inclusive workplace. We believe in fostering an environment where all team mem...","description_format":"text","description_chars":12321,"description_truncated":true,"requirements":{"experience_years_min":7,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Geospatial Analytics","Earth Observation","Space Services"],"lifecycle":[{"event":"open","at":"2026-09-30T16:34:17Z"}],"liveness":{"score":90,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.903,"p_room":1,"age_days":0,"expected_fill_days":37,"reasons":["conf:13","velocity","win:early","comp:brand"],"computed_at":"2026-10-01T05:45:00Z"},"pay":{"stated_usd_annual":162000,"is_top_pay":false},"html_url":"https://alion.io/job/vantor-software-engineering-manager-of-platform-authentication-authorization","json_url":"https://alion.io/job/vantor-software-engineering-manager-of-platform-authentication-authorization.json","meta":{"generated_at":"2026-10-01T22:09:03Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","usage":{"tier":"crawler","counted_by":"address","units_charged":1,"used_today":4880,"day_limit":5000,"remaining_today":120,"minute_limit":60,"resets_at":"2026-10-02T00:00:00Z"}}}