Senior Identity & Auth Engineer
Core
Build multi-tenant identity and authorization infrastructure for classified space operations environments (IL6/SECRET), enabling secure access for autonomous spacecraft and mission software.
Role type
Senior Identity & Authorization Engineer
Builds
Kubernetes-native identity platforms, policy-as-code enforcement systems, and workload identity frameworks for classified government systems.
Domain
Defense / Space Operations / Cybersecurity
Deliverable
production ML models | infrastructure
Required skills
Kubernetes production operations, Identity Provider deployment (Keycloak, Dex), Authorization model design (RBAC, ABAC, ReBAC), Policy-as-code (OPA, Kyverno), Secret management (Vault), Zero Trust architecture, Python/Go/Bash scripting
Preferred skills
Active TS/SCI clearance, IL4/IL5 deployment experience, ATO process participation, Modern authorization frameworks (SpiceDB, OpenFGA), Service mesh authentication (Istio, Linkerd), CAC/PIV integration
Technologies
Kubernetes, Keycloak, Dex, Authentik, SPIFFE/SPIRE, OPA, Kyverno, Cedar, Istio, Linkerd, Cilium, HashiCorp Vault, Azure Key Vault, CAC/PIV, LDAP, Active Directory, SAML 2.0
Responsibilities
Architect and deploy Kubernetes-native identity infrastructure for multi-tenant classified environments; Serve as technical authority for identity controls during ATO processes; Design multi-tenant isolation strategies to prevent lateral movement; Evaluate and harden self-hosted IdPs for classified clusters; Design fine-grained authorization models for space operations; Implement workload identity frameworks and service mesh authentication; Build policy-as-code systems for runtime compliance enforcement; Integrate with government identity systems (CAC/PIV, LDAP, AD); Collaborate on secret management strategies for IL6 environments; Define auth/authorization contracts for microservices; Partner with auditors during ATO processes.
Seniority
Senior, hands-on IC