Senior Identity & Access Architect - Space

Menlo Ventures; Laguna Beach (CA); Hybrid; USD 150,000 - 225,000; Full time

Benefits offered by this job

Platinum healthcare

Flexible work hours/location

Stock options

Job summary

True Anomaly is seeking an experienced Senior Identity & Authorization Engineer to build a multi-tenant identity infrastructure for classified space operations. You will deploy Kubernetes-native identity platforms, implement fine-grained authorization, and provide deep expertise in identity during compliance processes.

Role involves integrating modern authorization frameworks, policy-as-code enforcement, and collaboration with security and platform teams to meet rigorous IL6 standards and

Qualifications

• Clearance: Eligible for TS/SCI clearance (U.S. citizen or lawful permanent resident), active clearance preferred.
• 10+ years in platform/security engineering with 5+ years focusing on identity, authentication, or authorization systems.
• Multi-Tenant architecture: Designed and implemented tenant isolation for SaaS/defense/high-assurance systems.
• Kubernetes production experience: Deployed and operated production Kubernetes clusters with 3+ years.
• Identity infrastructure: Experience deploying/operating K8s-native IdP or enterprise IAM.
• Authorization design: Implemented RBAC/ABAC/ReBAC in production systems.
• Zero Trust: Knowledge of NIST SP 800-207 and zero trust patterns.
• Compliance frameworks: Knowledge of NIST 800-53, CMMC 3+, or FedRAMP High.
• Scripting/Automation: Proficiency in Python, Go, or Bash for automation.

Responsibilities

• Architect and deploy Kubernetes-native identity and authorization infrastructure for IL6 (SECRET) multi-tenant environments.
• Serve as technical authority for identity/auth controls during ATO processes; document compliance for IdP components.
• Design multi-tenant isolation strategies ensuring zero lateral movement between boundaries.
• Evaluate and harden self-hosted IdPs (Keycloak, Dex, Authentik) for classified clusters.
• Design authorization models (RBAC, ABAC, ReBAC) for space operations with fine-grained access control.
• Implement workload identity frameworks (SPIFFE/SPIRE, tokens) and service mesh authentication.
• Build policy-as-code systems (OPA/Gatekeeper, Kyverno) for runtime enforcement.
• Integrate with government identity systems (CAC/PIV, LDAP, AD) and SAML apps.
• Collaborate on secret management (Vault, Azure Key Vault) with key lifecycle management.
• Work with apps to define authentication/authorization contracts for microservices.
• Partner with customers and auditors during ATO to address findings.
• Stay current on identity/auth technologies for classified environments.

Skills

TS/SCI clearance

Kubernetes

Identity / IAM

RBAC/ABAC/ReBAC

Keycloak / Dex / IdP

SPIFFE/SPIRE

OPA / Policy-as-code

Zero Trust

NIST 800-53 / FedRAMP

Automation / Python/Go

Tools

HashiCorp Vault

Keycloak

Istio

Job description

True Anomaly is seeking an experienced Senior Identity & Authorization Engineer to build a multi-tenant identity infrastructure for classified space operations. You will deploy Kubernetes-native identity platforms, implement fine-grained authorization, and provide deep expertise in identity during compliance processes.

Role involves integrating modern authorization frameworks, policy-as-code enforcement, and collaboration with security and platform teams to meet rigorous IL6 standards and