Senior Identity & Authorization Engineer — Space Ops (Hybrid)

True Anomaly; Long Beach, Denver (CA, CO); Hybrid; USD 180,000 - 260,000; Full time

Benefits offered by this job

Equity + Benefits

Platinum healthcare

Flexible work hours/location

Stock options

Job summary

True Anomaly seeks a Senior Identity & Authorization Engineer to build and secure our space operations platform. You will deploy Kubernetes-native identity infrastructure, implement fine-grained authorization, and drive compliance through policy-as-code in highly classified environments.

This role offers equity, platinum healthcare, and flexible work options. Ideal candidates bring 10+ years in security engineering with 5+ focused on identity, plus TS/SCI eligibility.

Qualifications

• Active TS/SCI clearance eligible; U.S. citizen or permanent resident
• 10+ years in platform/security engineering with 5+ years in identity/authorization
• Design and operate multi-tenant SaaS security for high-assurance systems
• Kubernetes production experience with 3+ years
• Experience deploying/operating at least one K8s-native IdP (Keycloak, Dex) or IAM system
• Experience implementing RBAC/ABAC/REBAC in production
• Strong understanding of zero trust models per NIST SP 800-207
• Knowledge of NIST 800-53, CMMC 3+ or FedRAMP High
• Scripting: Python/Go/Bash for automation

Responsibilities

• Architect and deploy Kubernetes-native identity and authorization infrastructure for IL6 (SECRET) multi-tenant environments
• Serve as technical authority for identity controls during ATO processes
• Design multi-tenant isolation strategies with zero lateral movement
• Evaluate and harden self-hosted IdPs for classified clusters
• Design authorization models (RBAC/ABAC/ReBAC) for space operations
• Implement workload identity frameworks and service mesh authentication
• Build policy-as-code systems for runtime enforcement
• Integrate with government identity systems (CAC/PIV, LDAP, AD)
• Collaborate on secret management with Vault/KV and key lifecycle
• Define authentication/authorization contracts for microservices
• Engage with customers and auditors during ATO processes
• Stay current on identity/auth technologies for classified environments

Skills

Identity infrastructure

Kubernetes production

Zero Trust

Policy-as-code

Security architecture

Education

Bachelor's degree or higher in a relevant field

Tools

Keycloak

Dex

Authentik

SPIFFE/SPIRE

OPA

Istio

Linkerd

Cilium

HashiCorp Vault

Azure Key Vault

Job description

True Anomaly seeks a Senior Identity & Authorization Engineer to build and secure our space operations platform. You will deploy Kubernetes-native identity infrastructure, implement fine-grained authorization, and drive compliance through policy-as-code in highly classified environments.

This role offers equity, platinum healthcare, and flexible work options. Ideal candidates bring 10+ years in security engineering with 5+ focused on identity, plus TS/SCI eligibility.