Software Engineer, Security Platform

Aalyria

12h • $155,000 - $175,000 • Hybrid

About The Position

As a Software Engineer on Aalyria’s Security Platform team, you will build identity, credential, and audit capabilities that secure Spacetime. The team develops shared security capabilities that work consistently across every environment where Spacetime is deployed and produce compliance evidence. You will work with senior engineers and product engineering teams across Aalyria.

Spacetime runs in commercial and government clouds as well as classified or disconnected environments, where trust decisions must be verifiable offline without relying on an upstream service. The security platform is consolidating capabilities developed alongside Spacetime into a coherent layer centered on identity. The role suits engineers who are curious about security failures, attentive to detail, and willing to take ownership of what they ship.

The position involves access to export-controlled information. Applicants must qualify as a U.S. person, be eligible to access the information without export authorization, or be eligible and reasonably likely to obtain the required authorization. Aalyria may decline to pursue an export licensing process for legitimate business reasons. Aalyria is an Equal Opportunity Employer and encourages qualified applicants from all backgrounds to apply.

Requirements

• At least 5 years of backend software engineering experience on production services.
• Experience in Go, or backend experience in a comparable language and readiness to work in Go daily.
• Hands-on experience contributing to at least one of: a product authentication or authorization system, an identity provider integration, a certificate authority, or a secrets or key management service.
• Understanding of token-based authentication failures, including audience confusion, unverified issuers, key confusion, and redirect handling at token endpoints, and how to prevent them.
• Working knowledge of Kubernetes and cloud infrastructure.
• Comfort owning a production component, including on-call rotations and incident response.
• Clear written and verbal communication, including the ability to explain security tradeoffs to other engineers.

Nice To Haves

• Experience building for regulated, disconnected, or high-assurance environments.
• Experience integrating or operating an OIDC provider such as Zitadel, Keycloak, Okta, Auth0, or a comparable provider.
• Experience with authorization models such as policy engines, RBAC, or ReBAC.
• Experience with SPIFFE/SPIRE, Vault, cloud KMS, or HSM-backed key management.
• Experience with audit logging or evidence generation for FedRAMP, DoD Impact Levels, or a comparable regime.
• Experience threat modeling services you build.
• Bachelor’s degree in Computer Science or a related technical field, or equivalent practical experience.

Responsibilities

• Build Spacetime authentication and authorization capabilities, including token validation, trust anchors, and operator-configurable permissions.
• Implement authorization that supports delegation, multi-tenancy, and machine-to-machine access.
• Build and maintain PKI components, including certificate issuance, rotation, and revocation.
• Build workload identity and the libraries services use to present it.
• Build and maintain authentication SDKs used by Aalyria engineering teams and customers to access Spacetime APIs.
• Build access controls for secrets and keys, along with client libraries for teams to access them.
• Implement audit and structured logging that makes authorization decisions reconstructable, including in regulated, classified, and disconnected environments.
• Contribute to threat models and implement mitigations that address root causes.
• Operate shipped components in production, including availability, upgrades, security maintenance, on-call duties, and incident response.
• Work with product, infrastructure, and developer platform engineers to translate requirements into capabilities they adopt.
• Apply the platform’s security standards for hardened images, supply chain, and pipeline gates.

Benefits

• Professional development and advancement opportunities.
• Flexible working arrangements, including hybrid remote/in-office schedules.
• Competitive salary.
• Comprehensive benefits, including 401(k), dental, vision, health, and life insurance.
• Paid time off.
• Equity options.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level
• Education Level: No Education Listed