Staff Software Engineer, Security Platform (Aerospace)

Location: Remote (United States)

Salary: USD 230,000–250,000 per year

Company

hirify.global develops laser communications technology and temporospatial software-defined networking platforms for aerospace, satellite, airborne, cislunar, and deep-space communications.

What you will do

• Set the security architecture and technical direction for Spacetime across commercial cloud, government cloud, classified, and disconnected environments.
• Build authentication and authorization capabilities, including token validation, trust anchors, principal namespaces, permission models, delegation, multi-tenancy, machine-to-machine access, and break-glass access.
• Own PKI, certificate authorities, issuance, rotation, revocation, workload identity, secrets, keys, and related SDKs and client libraries.
• Design audit and structured logging schemas that make authorization decisions reconstructable and suitable as evidence in regulated and classified environments.
• Operate the platform in production, including availability, upgrades, security maintenance, incident response, threat modeling, and vulnerability mitigation.
• Define security standards for hardened images, service meshes, software supply chains, and pipeline gates while partnering with infrastructure, developer platform, and product engineering teams.

Requirements

• 10+ years of backend software engineering experience on production services, including ownership of systems other teams depend on.
• Deep experience in Go, or deep backend experience in a comparable language with readiness to work in Go daily.
• Built or been a core contributor and design owner for an authentication or authorization system, identity provider integration, certificate authority, or secrets or key management service.
• Firsthand experience with token-based authentication failure modes, including audience confusion, unverified issuers, key confusion, and redirect handling at token endpoints.
• Working knowledge of Kubernetes and cloud infrastructure.
• Experience setting technical direction across teams through design documents, decision-making, and adoption without direct authority.
• Experience mentoring engineers and improving design and code review quality.

Nice to have

• Experience with regulated, disconnected, or high-assurance environments.
• Experience integrating or operating OIDC providers such as Zitadel, Keycloak, Okta, Auth0, or comparable systems.
• Experience with authorization at scale, including policy engines, RBAC, ReBAC, or fine-grained permission services.
• Experience with SPIFFE/SPIRE, Vault, cloud KMS, or HSM-backed key management.
• Experience with audit logging or evidence generation for FedRAMP, DoD Impact Levels, or comparable regimes.
• Experience setting infrastructure security standards, threat modeling distributed systems, hardened images, supply chain security, or CI/CD pipeline gates.
• Bachelor’s degree in Computer Science or a related technical field, or equivalent practical experience.

Culture & Benefits

• Innovative and collaborative environment focused on aerospace communications and national security programs.
• Flexible working arrangements, including hybrid remote/in-office schedules.
• Professional development and advancement opportunities.
• Salary, equity options, comprehensive health, dental, vision, and life insurance, 401(k), and paid time off.
• Applicants must satisfy U.S. export-control eligibility requirements for access to ITAR/EAR-controlled information, including U.S. person status, eligibility without export authorization, or eligibility and reasonable likelihood of obtaining authorization.