SlipstreamJobs tracks this role from the company's public career site. Apply directly on the employer's site.
Hadrian is building autonomous factories to reindustrialize America, combining AI, advanced software, robotics, and full-stack manufacturing to help aerospace and defense companies build rockets, satellites, aircraft, ships, and other mission-critical systems up to 10x faster and at significantly lower cost. The company recently raised $1.37B in Series D funding at a $7.87B valuation and is rapidly expanding manufacturing capabilities across welding, casting, forging, electronics, and additive manufacturing.
As Senior Identity Engineer, you will own workforce and workload identity end-to-end across corporate, cloud, and factory systems that handle export-controlled technical data. This is a hands-on individual-contributor role on a small, high-leverage security team based in Los Angeles.
Key responsibilities include:
- Design, implement, and operate the IdP stack (Okta, Entra, Google Workspace, Auth0, Zitadel) — SSO, SCIM provisioning, and phishing-resistant MFA
- Build identity systems at scale leveraging OAuth 2.0, OIDC, SAML, and modern authorization models (RBAC and relationship-based access control) in production
- Own cloud identity end-to-end — Azure service principals, AWS IAM, and workload/service identity — and tie those identities to underlying infrastructure
- Work cross-functionally to help other teams meet identity needs and automate the access lifecycle (joiner-mover-leaver) and reviews
- Partner with Detection & Response and Compliance/FSO to ensure identity telemetry is detectable, actionable, and audit-ready
You will build an automation-first, least-privilege identity program that shrinks the largest attack surface while keeping engineers fast.
REQUIREMENTS:
- Strong software engineering fundamentals and a track record of shipping identity systems at scale — not just configuring vendor tools
- Real command of core identity concepts: OAuth 2.0 flows, OIDC, SAML, RBAC, and relationship-based access control (ReBAC)
- Hands-on depth with one or more IdPs (Okta, Entra, Google Workspace, Auth0, Zitadel)
- Cloud identity depth — Azure service principals, AWS IAM — and clear grasp of how those identities map to real infrastructure
- Autonomy and urgency to own the identity domain end-to-end on a small, high-leverage team with minimal direction
- U.S. citizen or national, lawful permanent resident, or eligible to obtain required ITAR authorizations from the U.S. Department of State
Differentiators:
- Fine-grained authorization at scale (ReBAC with OpenFGA / Zanzibar-style systems) built and run in production
- Identity engineering for OT/manufacturing or other regulated, controlled environments
- Large-scale passkey/FIDO2 or PAM (CyberArk/Teleport) rollouts
- Secrets management with HashiCorp Vault
- Experience on small, high-automation teams where output-per-engineer is the measure
