Software Engineering Manager of Platform Authentication & Authorization

MAXAR TECHNOLOGIES, INC.; Westminster (CO); On-site; USD 122,000 - 178,000; Full time

Benefits offered by this job

401(k) with company match

Mental health resources

Student loan repayment assistance

Adoption reimbursement

Pet insurance

Incentive plan eligibility

Job summary

Vantor seeks a Manager of Software Engineering to lead the Platform Authentication & Authorization team in Colorado. You will direct identity, access control, and entitlements services, including OAuth2.0/OIDC flows and Keycloak, while guiding a TypeScript/Vue 3 admin app.

You’ll drive staffing, prioritize work with Product Management, and ensure secure, scalable cloud services with strong delivery discipline and cross-team collaboration.

Qualifications

• U.S. citizenship and ability to obtain security clearance.
• Bachelor's degree in CS/SE or related field.
• 7+ years of professional software engineering experience.
• 2+ years in engineering management or technical leadership.
• Experience leading, coaching, and delivering with teams using Agile practices.
• Experience with cloud services and scalable cloud architectures.
• Strong communication and collaboration skills.
• Experience with Keycloak and OAuth2/OIDC is preferred.

Responsibilities

• Lead, coach, and develop a diverse team of software engineers.
• Translate objectives into engineering priorities, plans, and schedules.
• Plan staffing, capacity, and budget alignment.
• Partner with Product Management to clarify requirements and priorities.
• Identify risks and dependencies; drive decisions and resolution.
• Guide design, testing, deployment, and production support.
• Improve processes and foster ownership, accountability, and excellence.
• Oversee identity and access services, including OAuth2/OIDC and Keycloak.

Skills

Team leadership

Staffing planning

Stakeholder collaboration

Agile methodology

Software architecture

Security awareness

REST APIs

Communication skills

AI-assisted development tools

Education

Bachelor's in CS/SE

Tools

Keycloak

TypeScript/Vue 3

AWS

Kubernetes

Spring Boot

Job description

Vantor is forging the new frontier of spatial intelligence, helping decision makers and operators navigate what’s happening now and shape what’s coming next. Vantor is a place for problem solvers, changemakers, and go-getters—where people are working together to help our customers see the world differently, and in doing so, be seen differently. Come be part of a mission, not just a job, where you can: Shape your own future, build the next big thing, and change the world.

To be eligible for this position, you must be a U.S. Citizen.

This position requires an active U.S. Government security clearance, applicants who do not currently hold the required clearance will not be eligible for consideration. Employment for cleared roles is contingent upon verification of clearance status. Export Control/ITAR: Certain roles may be subject to U.S. export control laws, requiring U.S. person status as defined by 8 U.S.C. 1324b(a)(3).

Vantor is seeking a Manager of Software Engineering to lead the Platform Authentication & Authorization team. The team designs, builds, tests, delivers, and operates the identity and access capabilities that support users, administrators, and products across the platform.

What You’ll Do

Lead the Team and Deliver Results

• Lead, coach, and develop a team of software engineers with varied skills and areas of expertise.
• Establish team goals, performance expectations, development plans, and accountability; provide timely, meaningful feedback.
• Translate organizational and product objectives into clear engineering priorities, plans, schedules, and measurable outcomes.
• Plan staffing and capacity, identify skill gaps, allocate resources, and support budget and cost objectives as appropriate.
• Partner with Product Management and stakeholders to clarify requirements, evaluate priorities and tradeoffs, and translate business needs into executable engineering work.
• Identify risks, dependencies, resource constraints, and competing priorities early; drive decisions and resolution.
• Coordinate work across engineering teams and functional organizations when delivery requires shared ownership or dependencies.
• Guide the team through complex software design, development, integration, testing, deployment, and production-support challenges.
• Improve engineering processes, practices, and operating procedures to strengthen delivery, quality, and team effectiveness.
• Foster a culture of ownership, collaboration, accountability, technical excellence, and continuous improvement.

Lead the Platform Identity and Access Domain

• Oversee services supporting user identity, account lifecycle, access control, product entitlements, policy enforcement, and administrator workflows.
• Guide the design and implementation of OAuth 2.0 and OIDC flows, including authorization code with PKCE, client credentials, refresh tokens, token validation, token revocation, claims, scopes, and service-to-service authentication.
• Deliver secure MFA, SSO, federation, identity brokering, external identity-provider integration, and session-management capabilities.
• Configure, extend, and operate Keycloak, including realms, clients, roles, groups, protocol mappers, identity providers, administrative APIs, custom extensions, and production-support patterns.
• Guide development of the TypeScript/Vue 3 administrator application used to manage users, accounts, permissions, and policy-driven access.
• Ensure identity and access services are designed for appropriate availability, performance, observability, auditability, and operational support.
• Partner with Security and Compliance to apply threat modeling, secure SDLC practices, audit logging, secrets management, access reviews, vulnerability remediation, and relevant control expectations, including NIST, ISO 27001, and CMMC.
• Support capabilities that capture and surface platform usage and access data for reporting, billing, analytics, and operational insight.
• Promote and oversee AI-assisted engineering for implementation, test generation, documentation, troubleshooting, and design analysis, with disciplined validation and human review.

Minimum Requirements

• U.S. citizenship and willingness and ability to obtain a U.S. Government security clearance.
• Bachelor’s degree in Computer Science, Software Engineering, Systems Engineering, or a related technical discipline; four additional years of relevant experience may substitute for the degree.
• Seven or more years of professional software engineering experience, including significant ownership of production systems.
• At least two years of engineering-management experience, or equivalent technical‑leadership experience with responsibility for mentoring engineers, coordinating delivery, and leading through complex technical challenges.
• Experience leading, coaching, and developing engineers, including setting goals, establishing expectations, and providing performance feedback.
• Experience working in an Agile engineering environment, including practices such as test-driven development, behavior-driven development, continuous integration, and continuous delivery.
• Experience leading software modernization efforts or developing new product capabilities in complex technical environments.
• Strong understanding of the software development lifecycle, from requirements and architecture through development, testing, deployment, operations, and support.
• Demonstrated ability to guide the design of scalable, performant, and highly available cloud services, distributed systems, or microservice-oriented architectures.
• Strong understanding of production service operations, including SLAs, SLOs, incident management, observability, and operational readiness.
• Practical application of secure software design and delivery practices, such as threat modeling, audit logging, secrets handling, access-review workflows, vulnerability remediation, and secure SDLC controls.
• Experience building and consuming REST APIs with appropriate versioning, validation, authorization checks, observability, and error handling.
• Strong communication, judgment, and collaboration skills, with the ability to evaluate technical and organizational tradeoffs and influence across teams.
• Experience working with AI-assisted development tools, with disciplined validation and security-aware review of generated output.

Preferred Qualifications

• Hands‑on experience with Keycloak, including realm and client configuration, identity‑provider integration, protocol mappers, roles and groups, administrative APIs, or identity‑extension development.
• Deep practical knowledge of OAuth 2.0 and OIDC, including authorization code with PKCE, client credentials, refresh‑token handling, JWT validation, key rotation, scopes, claims, token lifetimes, and revocation patterns.
• Strong working knowledge of Java and Spring Boot, including the broader Spring ecosystem.
• Experience with modern authentication and authorization practices, including MFA, SSO, federation, RBAC, ABAC or policy‑based access control, identity lifecycle management, service accounts, and least‑privilege design.
• Experience with relational databases, SQL, schema‑migration tooling, and event‑driven architectures using a message broker.
• Experience with TypeScript and a modern frontend framework such as Vue, React, or Angular.
• Development and architecture experience with AWS and related cloud services.
• Experience with Kubernetes or EKS, service meshes, multi‑service environments, and hybrid deployments.
• Strong background in observability technologies such as Elastic, Grafana, OpenTelemetry, or AWS CloudWatch.

What Success Looks Like

Success in this role means building a strong software engineering team that delivers reliably, owns its commitments, makes sound technical decisions, and works effectively across organizational boundaries. This Manager will balance people leadership, technical judgment, delivery, resources, schedules, and business priorities while creating an environment in which engineers can perform at a high level.

Vantor values diversity in the workplace and is an equal opportunity/affirmative action employer. All qualified applicants will receive consideration for employment without regard to sex, gender identity, sexual orientation, race, color, religion, national origin, disability, protected veteran status, age, or any other characteristic protected by law.

Pay Transparency

The base pay for this position within Colorado is: $122,000.00 - $162,000.00 - $178,200.00 annually. For all other states, we use geographic cost of labor as an input to develop market-driven ranges for our roles, and as such, each location where we hire may have a different range.

Benefits

• Vantor offers a competitive total rewards package that goes beyond the standard, including a robust 401(k) with company match, mental health resources, and unique perks like student loan repayment assistance, adoption reimbursement and pet insurance to support all aspects of your life.
• Additionally, this position is incentive eligible with a target based on contribution, company performance, and/or individual results achieved; the specific incentive plan and target amount will be determined based on the role and breadth of contributions.

We also provide reasonable accommodations for applicants with disabilities in compliance with federal and state laws.

Vantor is forging the new frontier of spatial intelligence, helping decision makers and operators navigate what’s happening now and shape what’s coming next.

Vantor is an equal opportunity employer committed to an inclusive workplace. All qualified applicants will receive consideration for employment without regard to race, color, religion, national origin, sex, gender identity, sexual orientation, disability, protected veteran status, age, or any other characteristic protected by law.