Identity Software Engineer

Lorien; Town of Florida, Washington (NY, District of Columbia); Hybrid; USD 140,000 - 215,000; Full time

Job summary

Lorien is seeking an Identity Software Engineer to join our Defense Technology team. You will design and build a company-wide identity platform protecting critical defense products, working with a cross-functional Security Engineering group.

The role requires 5+ years of software experience and comfort with autonomy and end-to-end ownership. Ideal candidates will lead identity initiatives, integrate across providers and cloud environments, and automate lifecycle management.

Qualifications

• 5+ years of software engineering experience in security-focused environments.
• Proficient in Go or Rust and cloud infrastructure (AWS, Azure, or GCP).
• Experience provisioning infrastructure as code (Terraform / AWS CDK).
• Experience with identity standards (OAuth, SAML, OIDC) and providers (Okta, Azure AD).
• Ability to ship end-to-end identity solutions with minimal supervision.
• Willing to obtain and maintain U.S. Top Secret clearance.

Responsibilities

• Design and build a company-wide identity platform from scratch, protecting defense tech infrastructure.
• Bridge identity across providers, cloud environments, and internal tooling for a unified model.
• Automate identity lifecycle from onboarding to offboarding to reduce manual work.
• Translate identity policies into working software for teams to leverage.
• Collaborate with identity engineers and cross-functional teams at pace.

Skills

Go

Rust

CI/CD

Security clearance eligibility

Tools

Terraform

AWS CDK

OAuth / SAML / OIDC

Okta / Azure AD

Job description

Identity Software Engineer (BBBH2324216) Orange, California

Salary: USD140000 - USD215000 per annum

Title: Identity Software Engineer
Location: Orange County, CA, Washington, DC, or fully remote (USA)
Pay: $140,000 - $215,000/year, depends on experience level
Type: Full time, Direct Hire

Summary

Lorien has an exciting opportunity for an Identity Software Engineer to join our Defense Technology client on a direct hire basis. In this role, you'll build critical security and authorization infrastructure that protects the systems behind advanced defense technology products. The ideal candidate brings 5+ years of software engineering experience and thrives in a fast-paced environment & enjoys autonomy/owning work end-to-end.

Responsibilities

• Design and build a company-wide identity platform from the ground up, from initial solutioning through hands-on implementation, protecting the infrastructure behind the company's defense technology products, working within the broader Security Engineering team
• Bridge identity across a patchwork of providers, cloud environments, and internal tooling so the company operates on one coherent identity model
• Reduce manual identity work by automating the full lifecycle, from onboarding through access recertification to offboarding
• Turn the company's identity and access policies into working software that teams can actually build on top of
• Partner closely with peer identity engineers and cross-functional teams, shipping in small, fast iterations that match the org's pace of moving quickly rather than on multi-year timelines

Required Qualifications

• Deep proficiency in a systems-level language such as Go or Rust
• Hands-on production experience provisioning infrastructure through code (Terraform, AWS CDK, or similar)
• Working knowledge of identity standards and providers, such as OAuth, SAML, SCIM, OIDC, Okta, or Azure AD
• History of shipping clean, well-structured code that holds up as systems scale and evolve
• Comfortable driving technical direction, including running or actively shaping design and architecture discussions
• Practical experience with CI/CD-based deployment on modern cloud infrastructure
• Self-starter who can own initiatives end-to-end while staying closely aligned with other teams
• Must be eligible to obtain and maintain a U.S. Top Secret security clearance

Preferred Qualifications

• Comfortable operating within AWS, Azure, or GCP environments
• Has built custom, ground-up solutions inside fast-moving, technically demanding organizations
• Understanding of access-control models like RBAC or ABAC, or policy-as-code tools such as OPA or Cedar
• Has diagnosed and resolved thorny identity/access problems spanning multiple systems