Software Engineer, Identity & Access Management

Telemetry Today LLC; Los Angeles (CA); On-site; USD 192,000 - 274,000; Full time

Benefits offered by this job

Medical insurance

401k

Relocation support

Equity

Job summary

Hadrian is seeking an experienced Staff Software Engineer, Identity and Access Management, to build the security foundation for the API Platform. You will own authentication, authorization, and credential automation across cloud, Kubernetes, and factory floor systems and partner with the API Platform PM to deliver developer-friendly IAM features.

This is a product pillar role; you’ll define scale direction, enable secure-by-default practices, and shape IAM across Hadrian’s growing multi-cloud,

Qualifications

• 8–12+ years in software engineering, with 3+ years in IAM at scale.
• Deep expertise in OAuth 2.0, OpenID Connect (OIDC), SAML, and SCIM.
• Strong understanding of RBAC, ABAC, and ReBAC with architectural tradeoffs.

Responsibilities

• Design scalable authentication and authorization across cloud and factory environments.
• Own authentication stack: SSO, MFA, OIDC/SAML, service-to-service auth across AWS, GCP, and others.
• Build fine-grained access control (RBAC/ABAC/ReBAC) for internal teams and partners.

Skills

Identity systems

Authentication

Authorization

Go/Python

OAuth/OIDC

RBAC/ABAC/ReBAC

Education

Bachelor's degree in Computer Science

Tools

Kubernetes

Vault

Job description

Hadrian is building autonomous factories to reindustrialize America. By combining AI, advanced software, robotics, and full-stack manufacturing, we help aerospace and defense companies build rockets, satellites, aircraft, ships, and other mission-critical systems up to 10x faster and at significantly lower cost.

Following our $1.37B Series D at a $7.87B valuation, Hadrian is rapidly expanding our manufacturing footprint, launching new capabilities across welding, casting, forging, electronics, additive manufacturing, and more, while scaling our Factory-as-a-Service platform to transform how critical products are built.

Backed by leading investors including JPMorgan Chase, Valor Equity Partners, Andreessen Horowitz, Founders Fund, 137 Ventures, Lux Capital, T. Rowe Price, and Morgan Stanley, we’re building the future of American manufacturing—and looking for exceptional people to help make it happen.

If you’re ready to take on the most challenging and rewarding work of your career while helping create American manufacturing jobs for generations to come, you’re exactly who we’re looking for.

The Role

Hadrian's API Platform is how the outside world connects to our manufacturing systems. Every partner integration, every internal service, and every factory floor system that touches that platform depends on one thing being right: identity. Who is allowed in, what they can do, and how credentials are managed across a complex, multi-cloud, physically distributed environment.

As Staff Software Engineer, Identity and Access Management, you will build the security foundation that the API Platform is built on. You will own authentication, authorization, and credential automation across cloud infrastructure, Kubernetes workloads, and factory floor systems — and you will work in close partnership with the API Platform PM to ensure that IAM capabilities are surfaced as first-class developer experiences, not bolted-on compliance requirements.

This is not a supporting role. IAM is a product pillar here. You will own the technical layer end to end, set the direction for how it scales, and help define what secure-by-default looks like across everything Hadrian builds.

What You'll Do

Design and implement scalable authentication and authorization systems covering both human operators and machine identities across cloud and factory floor environments — serving as the security foundation for the API Platform

Own Hadrian's authentication stack: SSO, MFA, OIDC/SAML integrations, and service-to-service auth across AWS, GCP, and future cloud environments

Build fine-grained access control systems (RBAC/ABAC/ReBAC) that scale across internal engineering teams, factory systems, and external API partners

Develop frameworks, APIs, and CLI tools that automate credential provisioning, rotation, and policy enforcement for both internal teams and external API consumers

Build identity and access models for machine-to-machine communication across factory floor systems, Kubernetes workloads, and cloud services

Partner with Security to ensure IAM systems meet compliance and audit requirements; troubleshoot complex identity and access issues across distributed systems

Work with the API Platform PM to define how IAM capabilities are surfaced as developer-friendly product experiences — for internal engineers and external partners alike

Build tooling, SDKs, and documentation that make it easy to integrate with IAM correctly and hard to do so incorrectly

Set IAM standards across the engineering org and act as the domain expert on access-sensitive architecture decisions

What We're Looking For

8–12+ years in software engineering, with 3+ years of focused experience in identity, authentication, or authorization systems at scale

Deep, hands-on expertise in modern auth protocols: OAuth 2.0, OpenID Connect (OIDC), SAML, and SCIM

Strong understanding of access control models — RBAC, ABAC, and ReBAC — and the ability to make sound architectural tradeoffs between them

Security-first mindset: you understand threat modeling, risk assessment, and least-privilege principles, and you embed security throughout the SDLC

Proficiency in Go, Python, or similar; track record of writing high-quality, maintainable code

Ability to set technical direction independently, write clear design docs, and drive alignment across teams

Comfort working alongside a PM counterpart — you can divide technical and product ownership clearly and collaborate effectively

Bachelor's degree in Computer Science or related field, or equivalent experience

What Will Set You Apart

Experience building IAM systems that serve external developer ecosystems — not just internal users

Experience building identity systems for non-human entities: service accounts, workload identity, machine certificates, Kubernetes service accounts

Familiarity with policy-as-code frameworks (OPA, Casbin, or similar)

Experience with zero-trust network architecture

Hands-on experience with secrets management platforms (Vault or equivalent) at scale

Prior experience in aerospace, defense, or manufacturing environments with ITAR or export control considerations

Experience working alongside a PM on a developer-facing platform product

Growth & Trajectory

This is a founding role with a clear path upward. As Hadrian's API Platform scales and the IAM function grows in complexity — more factory locations, more partners, more systems — so does the scope of this role. The natural trajectory leads toward technical lead or architect of a broader Security and Identity platform org, with the potential to grow a team around you.

Compensation

For this role, the target salary range is $192,000-$273,500, plus offers equity.

This is the lowest to highest salary we reasonably and in good faith believe we would pay for this role at the time of this posting. We may ultimately pay more or less than the posted range, and the range may be modified in the future. An employee's pay position within the salary range will be based on several factors, including, but not limited to, relevant education, qualifications, certifications, experience, skills, geographic location, performance, and business or organizational needs.

Benefits for Full-time Employees

• Medical, dental, vision, and life insurance plans for employees
• 401k
• Relocation support may be provided for certain situations, based on business need.
• Flexible vacation policy
• Equity
• To conform to U.S. Government export regulations, including the International Traffic in Arms Regulations (ITAR) you must be a U.S. citizen or national, lawful permanent resident, protected individual as defined by 8 U.S.C. 1324b(a)(3), or eligible to obtain the required authorizations from the U.S. Department of State. Learn more about the ITAR here.

Use of AI in hiring

Hadrian uses AI-assisted tools in our recruiting and hiring processes to help our team work more efficiently. This may include tools that help organize and analyze recruiting data, as well as an AI-powered notetaker that can record and transcribe interviews and help coordinate feedback. These tools support our team and are not used to make hiring decisions. All candidate evaluations and hiring decisions are performed by humans. If an interview will be recorded, you will be notified in advance and may opt out at any time with no impact on your candidacy. Candidate data processed through these tools is subject to the same protections described in our Privacy Policy .

Consideration of Criminal History

Hadrian will consider for employment qualified applicants with criminal histories in a manner consistent with the requirements of all applicable laws. We do not ask about criminal history on our application, and we do not consider criminal history before making a conditional offer of employment.

Hadrian Is An Equal Opportunity Employer

Hadrian does not unlawfully discriminate on the basis of race, color, religion, gender, national origin/ethnicity, veteran status, disability status, age, sexual orientation, marital status, mental status, physical disability or any other legally protected status. When necessary, the Company also makes reasonable accommodations for disabled candidates and employees, including for candidates or employees who are disabled by pregnancy, childbirth, or related medical conditions.