Software Engineer, Identity

Hadrian Automation • Torrance, CA

3d • $170,000 - $200,000 • Onsite

About The Position

As our Senior Identity Engineer, you will own workforce and workload identity end-to-end — SSO, MFA, the joiner-mover-leaver lifecycle, privileged access, secrets, and service/machine identity — across corporate, cloud, and factory systems that handle export-controlled technical data. You will build an automation-first, least-privilege identity program that shrinks our largest attack surface while keeping engineers fast. This is a hands-on individual-contributor role on a small, high-leverage security team in Los Angeles.

Requirements

• Strong software engineering fundamentals and a track record of shipping identity systems at scale — not just configuring a vendor tool or leaning on AI-assisted coding.
• Real command of core identity concepts — OAuth 2.0 flows, OIDC, SAML, RBAC, and relationship-based access control (ReBAC) — and the ability to design systems that exploit these protocols well.
• Hands-on depth with one or more IdPs (Okta / Entra / Google Workspace / Auth0 / Zitadel), since day-to-day is implementing, designing, and integrating these platforms.
• Cloud identity depth — Azure service principals, AWS IAM — and a clear grasp of how those identities map to real infrastructure.
• The autonomy and urgency to own the identity domain end-to-end on a small, high-leverage team with minimal direction.

Nice To Haves

• Fine-grained authorization at scale (ReBAC with OpenFGA / Zanzibar-style systems) built and run in production.
• Identity engineering for OT/manufacturing or other regulated, controlled environments.
• Large-scale passkey/FIDO2 or PAM (CyberArk/Teleport) rollouts, and secrets management with HashiCorp Vault.
• Experience building on a small, high-automation team where output-per-engineer is the measure; detection-engineering and ITAR-aware access design.

Responsibilities

• Design, implement, and operate our IdP stack (e.g., Okta, Entra, Google Workspace, Auth0, or Zitadel) — SSO, SCIM provisioning, and phishing-resistant MFA — and build the systems around it.
• Build identity systems at scale that put OAuth 2.0 / OIDC / SAML and modern authorization models (RBAC and relationship-based access control) to work in production.
• Own cloud identity end-to-end — Azure service principals, AWS IAM, and workload/service identity — and tie those identities cleanly to the underlying infrastructure.
• Work cross-functionally to help other teams meet their identity needs, and automate the access lifecycle (joiner-mover-leaver) and reviews.
• Partner with Detection & Response and Compliance/FSO so identity telemetry is detectable, actionable, and audit-ready.

Benefits

• Medical, dental, vision, and life insurance plans for employees
• 401k
• Relocation support may be provided for certain situations, based on business need.
• Flexible vacation policy
• Equity

What This Job Offers

• Job Type: Full-time
• Career Level: Senior
• Education Level: No Education Listed