Staff Software Engineer, Identity and Access Management

Location: On-site in Los Angeles, CA; San Francisco Bay Area, CA; or Seattle/Bellevue Area, WA

Salary: $192,000–$273,500 per year, plus equity

Company

hirify.global builds autonomous factories and a Factory-as-a-Service platform using AI, software, robotics, and full-stack manufacturing for aerospace, defense, and other mission-critical products.

What you will do

• Design and implement scalable authentication and authorization for human operators and machine identities across cloud and factory-floor environments.
• Own the authentication stack, including SSO, MFA, OAuth 2.0, OIDC, SAML, SCIM, and service-to-service authentication across AWS, GCP, and future cloud environments.
• Build fine-grained RBAC, ABAC, and ReBAC access-control systems for engineering teams, factory systems, and external API partners.
• Develop APIs, frameworks, CLI tools, SDKs, and documentation for credential provisioning, rotation, policy enforcement, and secure IAM integrations.
• Define identity models for Kubernetes workloads, cloud services, service accounts, and other machine-to-machine communication.
• Set IAM standards, partner with Security and the API Platform PM, support compliance and audits, and lead access-sensitive architecture decisions.

Requirements

• 8–12+ years of software engineering experience, including 3+ years focused on identity, authentication, or authorization systems at scale.
• Hands-on expertise with OAuth 2.0, OIDC, SAML, and SCIM, plus strong knowledge of RBAC, ABAC, and ReBAC.
• Experience designing IAM systems across AWS, GCP, and Azure, with knowledge of threat modeling, risk assessment, least privilege, and secure SDLC practices.
• Proficiency in Go, Python, or a similar language, with a record of writing maintainable production code.
• Ability to set technical direction independently, write design documents, and align engineering and product stakeholders.
• Must satisfy U.S. Government ITAR/export-control eligibility requirements, including U.S. citizenship or nationality, lawful permanent residence, protected-individual status, or eligibility to obtain required authorizations.

Nice to have

• Experience serving external developer ecosystems and building identity systems for non-human entities.
• Familiarity with policy-as-code frameworks such as OPA or Casbin and with zero-trust network architecture.
• Experience with Vault or equivalent secrets-management platforms at scale.
• Experience in aerospace, defense, or manufacturing environments involving ITAR or export-control considerations.
• Experience partnering with a PM on a developer-facing platform product.

Culture & Benefits

• Founding role with a path toward technical leadership or architecture of a broader Security and Identity platform organization.
• Medical, dental, vision, and life insurance.
• 401(k) and flexible vacation policy.
• Equity and possible relocation support based on business need.