Staff Security Architect: Platform Trust & Auth

Orbis Operations; McLean (VA); On-site; USD 150,000 - 230,000; Full time

Benefits offered by this job

Competitive retirement matching

Paid time off (PTO)

Flexible remote/office options

Job summary

Orbis Operations seeks a Staff Security Engineer to drive security and trust for Catalyst, our multi-cluster platform. You will set patterns for authentication, authorization, and tenant isolation and lead architecture across a critical infrastructure team.

Travel up to 25% internationally is required; you will collaborate with security and IT teams to align on patterns and standards, and mentor engineers in secure API design and threat modeling.

Qualifications

• 7+ years shaping platform or infrastructure security.
• Hands-on design/ops of mTLS and TLS-based trust in multi-service systems.
• Experience building authorization engines and policy models.
• Identity lifecycle: JWT, token issuance, revocation across tenants.
• Fluency in Go and protobuf/gRPC with secure service-to-service design.
• Threat modeling practice for host, plugin, and enrollment flows.
• Excellent communication with customers, product and engineering teams.

Responsibilities

• Define architecture for authentication/authorization layers and patterns.
• Lead reliability and security strategy for trust layer; set SLOs/SLAs.
• Participate in on-call and incident response for credential issues.
• Implement secure-by-default developer patterns and primitives (mTLS, SPIFFE).
• Define QA philosophy and security test strategy; own security gates.
• Review PRs across session/token systems for security and readiness.
• Architect encryptions at rest/in transit; manage key hierarchies and KMS.
• Lead design discussions; mentor engineers on secure API design.
• Coordinate with security/IT teams on networking and IAM patterns.

Skills

Platform security

mTLS & TLS

Authorization engines

JWT & tokens

Go & protobuf

Threat modeling

Communication

Technical leadership

Travel readiness

Tools

HashiCorp Vault

SPIFFE/SPIRE

OIDC/OAuth2/SAML

KMS integration

Job description

Orbis Operations seeks a Staff Security Engineer to drive security and trust for Catalyst, our multi-cluster platform. You will set patterns for authentication, authorization, and tenant isolation and lead architecture across a critical infrastructure team.

Travel up to 25% internationally is required; you will collaborate with security and IT teams to align on patterns and standards, and mentor engineers in secure API design and threat modeling.