Software Engineer, Identity

Hadrian Automation; Los Angeles (CA); Sur place; USD 150 000 - 210 000; Plein temps

Avantages offerts par ce poste

Medical, dental, vision, and life保险

401k

Relocation support

Flexible vacation

Equity

Résumé du poste

Hadrian, an innovator in autonomous manufacturing, seeks a Senior Identity Engineer in Los Angeles to own workforce and workload identity across corporate, cloud, and factory systems. You will build an automation‑first, least‑privilege identity program that minimizes risk while keeping engineers fast.

You will design, implement, and operate IdP stacks, manage OAuth 2.0 / OIDC / SAML, and coordinate cross‑functional access reviews to support scalable manufacturing software platforms.

Qualifications

• Strong software engineering fundamentals and a track record of shipping identity systems at scale.
• Deep understanding of OAuth 2.0, OIDC, SAML, RBAC, and relationship-based access control (ReBAC).
• Hands‑on experience with IdPs such as Okta, Entra, Google Workspace, Auth0 or Zitadel.

Responsabilités

• Design, implement, and operate IdP stack (SSO, SCIM, MFA) and the surrounding systems.
• Build identity systems at scale using OAuth 2.0 / OIDC / SAML and modern authorization models.
• Own cloud identity end‑to‑end (Azure, AWS) and map identities to infrastructure.

Connaissances

OAuth 2.0

OIDC

SAML

RBAC

ReBAC

IdP platforms

Cloud identity

Outils

Okta

Entra

Google Workspace

Auth0

Zitadel

Description du poste

Hadrian - Manufacturing the Future

Hadrian is building autonomous factories to reindustrialize America. By combining AI, advanced software, robotics, and full-stack manufacturing, we help aerospace and defense companies build rockets, satellites, aircraft, ships, and other mission‑critical systems up to 10x faster and at significantly lower cost.

Following our $1.37B Series D at a $7.87B valuation, Hadrian is rapidly expanding our manufacturing footprint, launching new capabilities across welding, casting, forging, electronics, additive manufacturing, and more, while scaling our Factory-as-a-Service platform to transform how critical products are built.

Backed by leading investors including JPMorgan Chase, Valor Equity Partners, Andreessen Horowitz, Founders Fund, 137 Ventures, Lux Capital, T. Rowe Price, and Morgan Stanley, we’re building the future of American manufacturing—and looking for exceptional people to help make it happen.

If you’re ready to take on the most challenging and rewarding work of your career while helping create American manufacturing jobs for generations to come, you’re exactly who we’re looking for.

The Role

As our Senior Identity Engineer, you will own workforce and workload identity end-to-end — SSO, MFA, the joiner‑mover‑leaver lifecycle, privileged access, secrets, and service/machine identity — across corporate, cloud, and factory systems that handle export‑controlled technical data. You will build an automation‑first, least‑privilege identity program that shrinks our largest attack surface while keeping engineers fast. This is a hands‑on individual‑contributor role on a small, high‑leverage security team in Los Angeles.

What You’ll Do

• Design, implement, and operate our IdP stack (e.g., Okta, Entra, Google Workspace, Auth0, or Zitadel) — SSO, SCIM provisioning, and phishing‑resistant MFA — and build the systems around it.

• Build identity systems at scale that put OAuth 2.0 / OIDC / SAML and modern authorization models (RBAC and relationship‑based access control) to work in production.

• Own cloud identity end-to-end — Azure service principals, AWS IAM, and workload/service identity — and tie those identities cleanly to the underlying infrastructure.

• Work cross‑functionally to help other teams meet their identity needs, and automate the access lifecycle (joiner‑mover‑leaver) and reviews.

• Partner with Detection & Response and Compliance/FSO so identity telemetry is detectable, actionable, and audit‑ready.

What We’re Looking For

• You can build. Strong software engineering fundamentals and a track record of shipping identity systems at scale — not just configuring a vendor tool or leaning on AI‑assisted coding.

• Real command of core identity concepts — OAuth 2.0 flows, OIDC, SAML, RBAC, and relationship‑based access control (ReBAC) — and the ability to design systems that exploit these protocols well.

• Hands‑on depth with one or more IdPs (Okta / Entra / Google Workspace / Auth0 / Zitadel), since day‑to‑day is implementing, designing, and integrating these platforms.

• Cloud identity depth — Azure service principals, AWS IAM — and a clear grasp of how those identities map to real infrastructure.

• The autonomy and urgency to own the identity domain end‑to‑end on a small, high‑leverage team with minimal direction.

What Will Set You Apart

• Fine‑grained authorization at scale (ReBAC with OpenFGA / Zanzibar‑style systems) built and run in production.

• Identity engineering for OT/manufacturing or other regulated, controlled environments.

• Large‑scale passkey/FIDO2 or PAM (CyberArk/Teleport) rollouts, and secrets management with HashiCorp Vault.

• Experience building on a small, high‑automation team where output‑per‑engineer is the measure; detection‑engineering and ITAR‑aware access design.

Benefits for Full‑time Employees

• Medical, dental, vision, and life insurance plans for employees
  401k

• Relocation support may be provided for certain situations, based on business need.

• Flexible vacation policy

• Equity

ITAR Requirements

To conform to U.S. Government export regulations, including the International Traffic in Arms Regulations (ITAR) you must be a U.S. citizen or national, lawful permanent resident, protected individual as defined by 8 U.S.C. 1324b(a)(3), or eligible to obtain the required authorizations from the U.S. Department of State. Learn more about the ITAR here.

Use of AI in hiring

Hadrian uses AI‑assisted tools in our recruiting and hiring processes to help our team work more efficiently. This may include tools that help organize and analyze recruiting data, as well as an AI‑powered notetaker that can record and transcribe interviews and help coordinate feedback. These tools support our team and are not used to make hiring decisions. All candidate evaluations and hiring decisions are performed by humans. If an interview will be recorded, you will be notified in advance and may opt out at any time with no impact on your candidacy. Candidate data processed through these tools is subject to the same protections described in our Privacy Policy.

Consideration of Criminal History

Hadrian will consider for employment qualified applicants with criminal histories in a manner consistent with the requirements of all applicable laws. We do not ask about criminal history on our application, and we do not consider criminal history before making a conditional offer of employment.

Hadrian Is An Equal Opportunity Employer

Hadrian does not unlawfully discriminate on the basis of race, color, religion, gender, national origin/ethnicity, veteran status, disability status, age, sexual orientation, marital status, mental status, physical disability or any other legally protected status. When necessary, the Company also makes reasonable accommodations for disabled candidates and employees, including for candidates or employees who are disabled by pregnancy, childbirth, or related medical conditions.