Software Engineer, Security Platform

Location: Remote (United States)

Salary: USD 155,000–175,000 per year

Company

hirify.global supplies laser communications technology and temporospatial software-defined networking platforms for the aerospace industry, including satellite, airborne mesh, cislunar, and deep-space communications.

What you will do

• Build authentication and authorization capabilities for Spacetime, including token validation, trust anchors, permission models, delegation, multi-tenancy, and machine-to-machine access.
• Develop PKI components for certificate issuance, rotation, and revocation, plus workload identity and service libraries.
• Build authentication SDKs, secrets and key access controls, and client libraries for Spacetime APIs.
• Implement structured audit logging that makes authorization decisions reconstructable in regulated, classified, and disconnected environments.
• Contribute to threat models and root-cause mitigations, and apply security standards for hardened images, software supply chain, and pipeline gates.
• Operate the platform in production, including availability, upgrades, security maintenance, on-call rotations, and incident response, while collaborating with product, infrastructure, and developer platform engineers.

Requirements

• 5+ years of backend software engineering experience on production services.
• Experience with Go, or backend experience in a comparable language and readiness to work in Go daily.
• Hands-on experience contributing to at least one authentication or authorization system, identity provider integration, certificate authority, or secrets/key management service.
• Understanding of token-based authentication failures, including audience confusion, unverified issuers, key confusion, and redirect handling at token endpoints, together with prevention methods.
• Working knowledge of Kubernetes and cloud infrastructure.
• Experience owning a production component, including on-call rotations and incident response.
• Clear written and verbal communication, including the ability to explain security tradeoffs to other engineers.
• Applicants must satisfy the stated U.S. export-control eligibility requirements for access to ITAR/EAR-controlled information.

Nice to have

• Experience building for regulated, disconnected, or high-assurance environments.
• Experience integrating or operating an OIDC provider such as Zitadel, Keycloak, Okta, Auth0, or comparable systems.
• Experience with policy engines, RBAC, ReBAC, SPIFFE/SPIRE, Vault, cloud KMS, or HSM-backed key management.
• Experience with audit logging or evidence generation for FedRAMP, DoD Impact Levels, or comparable regimes.
• Experience threat modeling the services being built.
• Bachelor’s degree in Computer Science or a related technical field, or equivalent practical experience.

Culture & Benefits

• Flexible working arrangements, including hybrid remote/in-office schedules.
• Professional development and advancement opportunities.
• Collaborative, supportive, and inclusive workplace.
• Health, dental, vision, and life insurance; 401(k); paid time off; and equity options.
• Work supporting aerospace communications and critical national security programs.