Identity Software Engineer

Lorien; Washington (District of Columbia); Remote; USD 140,000 - 215,000; Full time

Job summary

Lorien is seeking an Identity Software Engineer to join our Defense Technology client on a direct hire basis. You will build critical security and authorization infrastructure that protects the systems behind advanced defense technology products.

The ideal candidate brings 5+ years of software engineering experience and thrives in a fast-paced environment & enjoys autonomy/owning work end-to-end. Design a company-wide identity platform, bridge identity across providers and cloud

Qualifications

• 5+ years of software engineering experience.
• Design and build secure identity infrastructure.
• Experience with cloud providers and CI/CD.
• Experience with identity standards and providers (OAuth, SAML, OIDC).
• Ability to drive architecture discussions and own initiatives end-to-end.
• Eligible to obtain and maintain a U.S. Top Secret security clearance.

Responsibilities

• Design and build a company-wide identity platform from scratch.
• Bridge identity across providers, clouds, and internal tooling.
• Automate identity lifecycle from onboarding to offboarding.
• Translate identity policies into working software for teams.
• Collaborate with peers to ship in small, fast iterations.

Skills

Go

Rust

CI/CD

Security engineering

Tools

Terraform

AWS CDK

OAuth

SAML

Job description

Identity Software Engineer (BBBH2324216) Orange, California

Salary: USD140000 - USD215000 per annum

Title: Identity Software Engineer
Location: Orange County, CA, Washington, DC, or fully remote (USA)
Pay: $140,000 - $215,000/year, depends on experience level
Type: Full time, Direct Hire
Summary
Lorien has an exciting opportunity for an Identity Software Engineer to join our Defense Technology client on a direct hire basis. In this role, you'll build critical security and authorization infrastructure that protects the systems behind advanced defense technology products. The ideal candidate brings 5+ years of software engineering experience and thrives in a fast-paced environment & enjoys autonomy/owning work end-to-end.

• Design and build a company-wide identity platform from the ground up, from initial solutioning through hands-on implementation, protecting the infrastructure behind the company's defense technology products, working within the broader Security Engineering team
• Bridge identity across a patchwork of providers, cloud environments, and internal tooling so the company operates on one coherent identity model
• Reduce manual identity work by automating the full lifecycle, from onboarding through access recertification to offboarding
• Turn the company's identity and access policies into working software that teams can actually build on top of
• Partner closely with peer identity engineers and cross-functional teams, shipping in small, fast iterations that match the org's pace of moving quickly rather than on multi-year timelines

Required Qualifications:

• Deep proficiency in a systems-level language such as Go or Rust
• Hands-on production experience provisioning infrastructure through code (Terraform, AWS CDK, or similar)
• Working knowledge of identity standards and providers, such as OAuth, SAML, SCIM, OIDC, Okta, or Azure AD
• History of shipping clean, well-structured code that holds up as systems scale and evolve
• Comfortable driving technical direction, including running or actively shaping design and architecture discussions
• Practical experience with CI/CD-based deployment on modern cloud infrastructure
• Self-starter who can own initiatives end-to-end while staying closely aligned with other teams
• Must be eligible to obtain and maintain a U.S. Top Secret security clearance

Preferred Qualifications:

• Comfortable operating within AWS, Azure, or GCP environments
• Has built custom, ground-up solutions inside fast-moving, technically demanding organizations
• Understanding of access-control models like RBAC or ABAC, or policy-as-code tools such as OPA or Cedar
• Has diagnosed and resolved thorny identity/access problems spanning multiple systems