Senior Identity & Auth Engineer

Back to jobs Senior Identity & Authorization Engineer Denver, CO or Long Beach, CA Space is a warfighting domain. True Anomaly seeks those with the talent and ambition to build the technology that secures it. OUR MISSION True Anomaly delivers decisive capabilities for space superiority. We build autonomous spacecraft, advanced payloads, mission software, and space-based interceptors — enabling the U.S. and its Allies to secure the space environment and counter threats from the ultimate high ground. OUR VALUES Be the offset. We create asymmetric advantages with creativity and ingenuity.What would it take? We challenge assumptions to deliver ambitious results.It’s the people. Our team is our competitive advantage and we are better together. YOUR MISSION Software is the central nervous system for True Anomaly's engineering and product thesis. As we deploy our space operations platform into classified environments, identity and authorization become critical technical challenges requiring deep specialization. True Anomaly is seeking a highly experienced Senior Identity & Authorization Engineer to build the multi-tenant identity infrastructure that enables secure operations at IL6 (SECRET) and beyond. You'll deploy and integrate Kubernetes-native identity platforms, implement fine-grained authorization models for space operations, and provide deep technical expertise on identity/auth during compliance processes. Working closely with our security and platform teams, you'll evaluate and integrate modern authorization frameworks (ReBAC, SPIFFE/SPIRE, OPA), build policy-as-code enforcement systems, and ensure our identity architecture meets the rigorous standards required for classified environments. You do not need to have experience building space ground systems or experience in aerospace. You'll have ownership of challenging, greenfield problems and a chance to fundamentally impact the outcome of future conflict (and the future of the company), all while enjoying world-class benefits including platinum healthcare, flexible work hours/location, highly competitive compensation and a generous stock options package. RESPONSIBILITIES Architect and deploy Kubernetes-native identity and authorization infrastructure for IL6 (SECRET) multi-tenant environmentsServe as a technical authority for identity/auth controls during ATO processes, documenting and evidencing compliance for IdP componentsDesign and implement multi-tenant isolation strategies ensuring zero lateral movement between customer/program boundariesEvaluate, deploy, and harden self-hosted IdPs (Keycloak, Dex, Authentik, etc.) for classified Kubernetes clustersDesign authorization models (RBAC, ABAC, ReBAC) for space operations use cases with fine-grained access control requirementsImplement workload identity frameworks (SPIFFE/SPIRE, K8s projected tokens) and service mesh authentication (Istio, Linkerd, Cilium)Build policy-as-code systems (OPA/Gatekeeper, Kyverno, Cedar) for automated compliance enforcement at runtimeIntegrate with government identity systems (CAC/PIV, LDAP, Active Directory) and legacy SAML 2.0 applicationsCollaborate with security team on secret management strategy (HashiCorp Vault, Azure Key Vault) with encryption key lifecycle for IL6 environmentsWork with application teams to define authentication/authorization contracts for microservicesPartner with customers and government auditors during ATO processes to demonstrate compliance and address findingsStay current on emerging identity/auth technologies and evaluate applicability to classified environments QUALIFICATIONS Clearance: Eligible for TS/SCI clearance (U.S. citizen or lawful permanent resident), active clearance strongly preferredExperience: 10+ years in platform/security engineering with 5+ years focused on identity, authentication, or authorization systemsMulti-Tenant Architecture: Designed and implemented proper tenant isolation (zero lateral movement, strong security boundaries) for SaaS, defense, or high-assurance systemsKubernetes Production Experience: Deployed and operated production Kubernetes clusters with 3+ years experienceIdentity Infrastructure: Production experience deploying/operating at least one K8s-native IdP (Keycloak, Dex, etc.) or enterprise IAM systemAuthorization Design: Implemented RBAC, ABAC, or ReBAC authorization models in production systemsZero Trust Principles: Deep understanding of NIST SP 800-207 and practical zero trust architecture patternsCompliance Frameworks: Working knowledge of NIST 800-53, CMMC Level 3+, or FedRAMP High requirementsScripting/Automation: Proficiency in Python, Go, or Bash for automation and tooling PREFERRED SKILLS AND EXPERIENCE Active TS/SCI clearance (or ability to start immediately upon clearance grant)IL4/IL5 deployment and operations experience (IL6 is nice-to-have but not required)ATO Experience: Participated in at least one ATO process for NIST 800-53, CMMC, FedRAMP, or IL4/IL5 systemsExperience with modern authorization frameworks (SpiceDB, Authzed, OpenFGA, Ory Keto)SPIFFE/SPIRE workload identity implementation experienceService mesh authentication (Istio, Linkerd, Cilium) in productionHashiCorp Vault or enterprise secret management in classified or high-assurance environmentsCAC/PIV card integration and PKI certificate managementPolicy-as-code (OPA/Rego, Kyverno, Cedar) for runtime enforcementExperience in aerospace, defense, intelligence community, or national security spaceStartup or fast-paced environment experience (balance velocity with compliance rigor) Nice-To-Have: CISSP, CCSP, or other security certificationsContributed to open-source identity/auth projects (Keycloak, Dex, OPA, SPIFFE, etc.)Experience with cross-domain solutions (CDS) or multi-level security (MLS) systemsKubernetes CKS (Certified Kubernetes Security Specialist) certificationPrevious experience at defense prime, IC contractor, or FAANG Gov (AWS/Azure/Google public sector) COMPENSATION Base Salary: $150,000 - $225,000 Equity + Benefits including Health, Dental, Vision, HRA/HSA options, PTO and paid holidays, 401K, Parental Leave Your actual level and base salary will be determined on a case-by-case basis and may vary based on the following considerations: job-related knowledge and skills, education, location, and experience. ADDITIONAL REQUIREMENTS Work Location—Successful candidates will be located near Denver or Colorado Springs. While we observe a hybrid work environment, some work must be done on site.Work environment—the work environment; temperature, noise level, inside or outside, or other factors that will affect the person's working conditions while performing the job.Physical demands—the physical demands of the job, including bending, sitting, lifting and driving. This position will be open until it is successfully filled. To submit your application, please follow the directions below. To conform to U.S. Government space technology export regulations, including the International Traffic in Arms Regulations (ITAR) you must be a U.S. citizen, lawful permanent resident of the U.S., protected individual as defined by 8 U.S.C. 1324b(a)(3), or eligible to obtain the required authorizations from the U.S. Department of State. True Anomaly is committed to equal employment opportunity on any basis protected by applicable state and federal laws. If you have a disability or additional need that requires accommodation, please do not hesitate to let us. Create a Job Alert Interested in building your career at True Anomaly? Get future opportunities sent straight to your email. Create alert Apply for this job indicates a required field First Name* Last Name* Email* Phone Country* Phone* 244 results found No results found Afghanistan+93Åland Islands+358Albania+355Algeria+213American Samoa+1Andorra+376Angola+244Anguilla+1Antigua & Barbuda+1Argentina+54Armenia+374Aruba+297Ascension Island+247Australia+61Austria+43Azerbaijan+994Bahamas+1Bahrain+973Bangladesh+880Barbados+1Belarus+375Belgium+32Belize+501Benin+229Bermuda+1Bhutan+975Bolivia+591Bosnia & Herzegovina+387Botswana+267Brazil+55British Indian Ocean Territory+246British Virgin Islands+1Brunei+673Bulgaria+359Burkina Faso+226Burundi+257Cambodia+855Cameroon+237Canada+1Cape Verde+238Caribbean Netherlands+599Cayman Islands+1Central African Republic+236Chad+235Chile+56China+86Christmas Island+61Cocos (Keeling) Islands+61Colombia+57Comoros+269Congo - Brazzaville+242Congo - Kinshasa+243Cook Islands+682Costa Rica+506Côte d’Ivoire+225Croatia+385Cuba+53Curaçao+599Cyprus+357Czechia+420Denmark+45Djibouti+253Dominica+1Dominican Republic+1Ecuador+593Egypt+20El Salvador+503Equatorial Guinea+240Eritrea+291Estonia+372Eswatini+268Ethiopia+251Falkland Islands+500Faroe Islands+298Fiji+679Finland+358France+33French Guiana+594French Polynesia+689Gabon+241Gambia+220Georgia+995Germany+49Ghana+233Gibraltar+350Greece+30Greenland+299Grenada+1Guadeloupe+590Guam+1Guatemala+502Guernsey+44Guinea+224Guinea-Bissau+245Guyana+592Haiti+509Honduras+504Hong Kong SAR China+852Hungary+36Iceland+354India+91Indonesia+62Iran+98Iraq+964Ireland+353Isle of Man+44Israel+972Italy+39Jamaica+1Japan+81Jersey+44Jordan+962Kazakhstan+7Kenya+254Kiribati+686Kosovo+383Kuwait+965Kyrgyzstan+996Laos+856Latvia+371Lebanon+961Lesotho+266Liberia+231Libya+218Liechtenstein+423Lithuania+370Luxembourg+352Macao SAR China+853Madagascar+261Malawi+265Malaysia+60Maldives+960Mali+223Malta+356Marshall Islands+692Martinique+596Mauritania+222Mauritius+230Mayotte+262Mexico+52Micronesia+691Moldova+373Monaco+377Mongolia+976Montenegro+382Montserrat+1Morocco+212Mozambique+258Myanmar (Burma)+95Namibia+264Nauru+674Nepal+977Netherlands+31New Caledonia+687New Zealand+64Nicaragua+505Niger+227Nigeria+234Niue+683Norfolk Island+672North Korea+850North Macedonia+389Northern Mariana Islands+1Norway+47Oman+968Pakistan+92Palau+680Palestinian Territories+970Panama+507Papua New Guinea+675Paraguay+595Peru+51Philippines+63Poland+48Portugal+351Puerto Rico+1Qatar+974Réunion+262Romania+40Russia+7Rwanda+250Samoa+685San Marino+378São Tomé & Príncipe+239Saudi Arabia+966Senegal+221Serbia+381Seychelles+248Sierra Leone+232Singapore+65Sint Maarten+1Slovakia+421Slovenia+386Solomon Islands+677Somalia+252South Africa+27South Korea+82South Sudan+211Spain+34Sri Lanka+94St. Barthélemy+590St. Helena+290St. Kitts & Nevis+1St. Lucia+1St. Martin+590St. Pierre & Miquelon+508St. Vincent & Grenadines+1Sudan+249Suriname+597Svalbard & Jan Mayen+47Sweden+46Switzerland+41Syria+963Taiwan+886Tajikistan+992Tanzania+255Thailand+66Timor-Leste+670Togo+228Tokelau+690Tonga+676Trinidad & Tobago+1Tunisia+216Turkey+90Turkmenistan+993Turks & Caicos Islands+1Tuvalu+688U.S. Virgin Islands+1Uganda+256Ukraine+380United Arab Emirates+971United Kingdom+44United States+1Uruguay+598Uzbekistan+998Vanuatu+678Vatican City+39Venezuela+58Vietnam+84Wallis & Futuna+681Western Sahara+212Yemen+967Zambia+260Zimbabwe+263 Resume/CV* Attach Enter manually Accepted file types: pdf, doc, docx, txt, rtf Cover Letter Attach Enter manually Accepted file types: pdf, doc, docx, txt, rtf LinkedIn Profile Website Are you legally authorized to work in the United States?* Select... The person hired will have access to information and items controlled by the International Traffic in Arms Regulation (ITAR). To conform to U.S. Government space technology export regulations, including the ITAR, you must be a U.S. citizen, lawful permanent resident of the U.S. (i.e., current Green Card holder), lawfully admitted into the U.S. as a refugee or granted asylum, or be eligible to obtain the required authorizations from the U.S. Department of State. Are you currently a U.S. Person as described above, or otherwise eligible to obtain the required authorization?* Select... If other, please provide details as it relates to ITAR eligibility. Answer N/A if not applicable. * Do you need, or will you need in the future, any immigration related support or sponsorship from True Anomaly in order to begin or continue employment with True Anomaly? This includes support (such as J-1, F-1, CPT letter or STEM OPT Training Plan), visa sponsorship for employment (H-1B, H-1B1, E-1, O-1, or TN), and any EAD holders that will need longer term employment authorization (temporary work visa or permanent residency).* Select... Voluntary Self-Identification For government reporting purposes, we ask candidates to respond to the below self-identification survey. Completion of the form is entirely voluntary. Whatever your decision, it will not be considered in the hiring process or thereafter. Any information that you do provide will be recorded and maintained in a confidential file. As set forth in True Anomaly’s Equal Employment Opportunity policy, we do not discriminate on the basis of any protected group status under any applicable law. Gender Select... Are you Hispanic/Latino? Select... Race & Ethnicity Definitions If You Believe You Belong To Any Of The Categories Of Protected Veterans Listed Below, Please Indicate By Making The Appropriate Selection. As a Government Contractor Subject To The Vietnam Era Veterans Readjustment Assistance Act (VEVRAA), We Request This Information In Order To Measure The Effectiveness Of The Outreach And Positive Recruitment Efforts We Undertake Pursuant To VEVRAA. Classification Of Protected Categories Is As Follows: A "disabled veteran" is one of the following: a veteran of the U.S. military, ground, naval or air service who is entitled to compensation (or who but for the receipt of military retired pay would be entitled to compensation) under laws administered by the Secretary of Veterans Affairs; or a person who was discharged or released from active duty because of a service-connected disability. A "recently separated veteran" means any veteran during the three-year period beginning on the date of such veteran's discharge or release from active duty in the U.S. military, ground, naval, or air service. An "active duty wartime or campaign badge veteran" means a veteran who served on active duty in the U.S. military, ground, naval or air service during a war, or in a campaign or expedition for which a campaign badge has been authorized under the laws administered by the Department of Defense. An "Armed forces service medal veteran" means a veteran who, while serving on active duty in the U.S. military, ground, naval or air service, participated in a United States military operation for which an Armed Forces service medal was awarded pursuant to Executive Order 12985. Veteran Status Select... Voluntary Self-Identification of Disability Form CC-305 Page 1 of 1 OMB Control Number 1250-0005 Expires 04/30/2026 Why are you being asked to complete this form? We are a federal contractor or subcontractor. The law requires us to provide equal employment opportunity to qualified people with disabilities. We have a goal of having at least 7% of our workers as people with disabilities. The law says we must measure our progress towards this goal. To do this, we must ask applicants and employees if they have a disability or have ever had one. People can become disabled, so we need to ask this question at least every five years. Completing this form is voluntary, and we hope that you will choose to do so. Your answer is confidential. No one who makes hiring decisions will see it. Your decision to complete the form and your answer will not harm you in any way. If you want to learn more about the law or this form, visit the U.S. Department of Labor’s Office of Federal Contract Compliance Programs (OFCCP) website at www.dol.gov/ofccp. How do you know if you have a disability? A Disability Is a Condition That Substantially Limits One Or More Of Your “major Life Activities.” If You Have Or Have Ever Had Such a Condition, You Are a Person With a Disability. Disabilities Include, But Are Not Limited To: Alcohol or other substance use disorder (not currently using drugs illegally)Autoimmune disorder, for example, lupus, fibromyalgia, rheumatoid arthritis, HIV/AIDSBlind or low visionCancer (past or present)Cardiovascular or heart diseaseCeliac diseaseCerebral palsyDeaf or serious difficulty hearingDiabetesDisfigurement, for example, disfigurement caused by burns, wounds, accidents, or congenital disordersEpilepsy or other seizure disorderGastrointestinal disorders, for example, Crohn's Disease, irritable bowel syndromeIntellectual or developmental disabilityMental health conditions, for example, depression, bipolar disorder, anxiety disorder, schizophrenia, PTSDMissing limbs or partially missing limbsMobility impairment, benefiting from the use of a wheelchair, scooter, walker, leg brace(s) and/or other supportsNervous system condition, for example, migraine headaches, Parkinson’s disease, multiple sclerosis (MS)Neurodivergence, for example, attention-deficit/hyperactivity disorder (ADHD), autism spectrum disorder, dyslexia, dyspraxia, other learning disabilitiesPartial or complete paralysis (any cause)Pulmonary or respiratory conditions, for example, tuberculosis, asthma, emphysemaShort stature (dwarfism)Traumatic brain injury Disability Status Select... PUBLIC BURDEN STATEMENT: According to the Paperwork Reduction Act of 1995 no persons are required to respond to a collection of information unless such collection displays a valid OMB control number. This survey should take about 5 minutes to complete. Space is a warfighting domain. True Anomaly seeks those with the talent and ambition to build the technology that secures it. OUR MISSION True Anomaly delivers decisive capabilities for space superiority. We build autonomous spacecraft, advanced payloads, mission software, and space-based interceptors — enabling the U.S. and its Allies to secure the space environment and counter threats from the ultimate high ground. OUR VALUES Be the offset. We create asymmetric advantages with creativity and ingenuity.What would it take? We challenge assumptions to deliver ambitious results.It’s the people. Our team is our competitive advantage and we are better together. YOUR MISSION Software is the central nervous system for True Anomaly's engineering and product thesis. As we deploy our space operations platform into classified environments, identity and authorization become critical technical challenges requiring deep specialization. True Anomaly is seeking a highly experienced Senior Identity & Authorization Engineer to build the multi-tenant identity infrastructure that enables secure operations at IL6 (SECRET) and beyond. You'll deploy and integrate Kubernetes-native identity platforms, implement fine-grained authorization models for space operations, and provide deep technical expertise on identity/auth during compliance processes. Working closely with our security and platform teams, you'll evaluate and integrate modern authorization frameworks (ReBAC, SPIFFE/SPIRE, OPA), build policy-as-code enforcement systems, and ensure our identity architecture meets the rigorous standards required for classified environments. You do not need to have experience building space ground systems or experience in aerospace. You'll have ownership of challenging, greenfield problems and a chance to fundamentally impact the outcome of future conflict (and the future of the company), all while enjoying world-class benefits including platinum healthcare, flexible work hours/location, highly competitive compensation and a generous stock options package. RESPONSIBILITIES Architect and deploy Kubernetes-native identity and authorization infrastructure for IL6 (SECRET) multi-tenant environmentsServe as a technical authority for identity/auth controls during ATO processes, documenting and evidencing compliance for IdP componentsDesign and implement multi-tenant isolation strategies ensuring zero lateral movement between customer/program boundariesEvaluate, deploy, and harden self-hosted IdPs (Keycloak, Dex, Authentik, etc.) for classified Kubernetes clustersDesign authorization models (RBAC, ABAC, ReBAC) for space operations use cases with fine-grained access control requirementsImplement workload identity frameworks (SPIFFE/SPIRE, K8s projected tokens) and service mesh authentication (Istio, Linkerd, Cilium)Build policy-as-code systems (OPA/Gatekeeper, Kyverno, Cedar) for automated compliance enforcement at runtimeIntegrate with government identity systems (CAC/PIV, LDAP, Active Directory) and legacy SAML 2.0 applicationsCollaborate with security team on secret management strategy (HashiCorp Vault, Azure Key Vault) with encryption key lifecycle for IL6 environmentsWork with application teams to define authentication/authorization contracts for microservicesPartner with customers and government auditors during ATO processes to demonstrate compliance and address findingsStay current on emerging identity/auth technologies and evaluate applicability to classified environments QUALIFICATIONS Clearance: Eligible for TS/SCI clearance (U.S. citizen or lawful permanent resident), active clearance strongly preferredExperience: 10+ years in platform/security engineering with 5+ years focused on identity, authentication, or authorization systemsMulti-Tenant Architecture: Designed and implemented proper tenant isolation (zero lateral movement, strong security boundaries) for SaaS, defense, or high-assurance systemsKubernetes Production Experience: Deployed and operated production Kubernetes clusters with 3+ years experienceIdentity Infrastructure: Production experience deploying/operating at least one K8s-native IdP (Keycloak, Dex, etc.) or enterprise IAM systemAuthorization Design: Implemented RBAC, ABAC, or ReBAC authorization models in production systemsZero Trust Principles: Deep understanding of NIST SP 800-207 and practical zero trust architecture patternsCompliance Frameworks: Working knowledge of NIST 800-53, CMMC Level 3+, or FedRAMP High requirementsScripting/Automation: Proficiency in Python, Go, or Bash for automation and tooling PREFERRED SKILLS AND EXPERIENCE Active TS/SCI clearance (or ability to start immediately upon clearance grant)IL4/IL5 deployment and operations experience (IL6 is nice-to-have but not required)ATO Experience: Participated in at least one ATO process for NIST 800-53, CMMC, FedRAMP, or IL4/IL5 systemsExperience with modern authorization frameworks (SpiceDB, Authzed, OpenFGA, Ory Keto)SPIFFE/SPIRE workload identity implementation experienceService mesh authentication (Istio, Linkerd, Cilium) in productionHashiCorp Vault or enterprise secret management in classified or high-assurance environmentsCAC/PIV card integration and PKI certificate managementPolicy-as-code (OPA/Rego, Kyverno, Cedar) for runtime enforcementExperience in aerospace, defense, intelligence community, or national security spaceStartup or fast-paced environment experience (balance velocity with compliance rigor) Nice-To-Have: CISSP, CCSP, or other security certificationsContributed to open-source identity/auth projects (Keycloak, Dex, OPA, SPIFFE, etc.)Experience with cross-domain solutions (CDS) or multi-level security (MLS) systemsKubernetes CKS (Certified Kubernetes Security Specialist) certificationPrevious experience at defense prime, IC contractor, or FAANG Gov (AWS/Azure/Google public sector) COMPENSATION Base Salary: $150,000 - $225,000 Equity + Benefits including Health, Dental, Vision, HRA/HSA options, PTO and paid holidays, 401K, Parental Leave Your actual level and base salary will be determined on a case-by-case basis and may vary based on the following considerations: job-related knowledge and skills, education, location, and experience. ADDITIONAL REQUIREMENTS Work Location—Successful candidates will be located near Denver or Colorado Springs. While we observe a hybrid work environment, some work must be done on site.Work environment—the work environment; temperature, noise level, inside or outside, or other factors that will affect the person's working conditions while performing the job.Physical demands—the physical demands of the job, including bending, sitting, lifting and driving. This position will be open until it is successfully filled. To submit your application, please follow the directions below. To conform to U.S. Government space technology export regulations, including the International Traffic in Arms Regulations (ITAR) you must be a U.S. citizen, lawful permanent resident of the U.S., protected individual as defined by 8 U.S.C. 1324b(a)(3), or eligible to obtain the required authorizations from the U.S. Department of State. True Anomaly is committed to equal employment opportunity on any basis protected by applicable state and federal laws. If you have a disability or additional need that requires accommodation, please do not hesitate to let us.