Staff Software Engineer, Identity & Access Management

🕒 vor 25 Tagen

🇺🇸 Vereinigte Staaten – Remote

💵 $185.000 - $260.000 / Jahr

⏰ Vollzeit

🔴 Experte

🧑‍💻 Full-Stack-Entwickler

🦅 H1B-Visum-Sponsor

Dieses Unternehmen hat in der Vergangenheit H1B-Visa gesponsert.

Jetzt Bewerben

Ähnliche Remote-Jobs finden

E-Mail-Benachrichtigung für neue Jobs einrichten

📊 Überprüfen Sie Ihre Lebenslauf-Bewertung für diese Stelle

Verbessern Sie Ihre Chancen auf ein Vorstellungsgespräch, indem Sie Ihre Lebenslauf-Bewertung vor der Bewerbung überprüfen.

Lebenslauf hochladen

SimSpace

WebsiteLinkedInAlle Stellen

201 - 500 Mitarbeiter

Gegründet 2015

💼 Beratung

🎖️ Verteidigung

🔒 Cybersecurity

🔥 Finanzierung im letzten Jahr

💰 €39.000.000 Venture Round - SimSpace im 2025-10

Consulting • Defense • Cybersecurity

SimSpace ist ein Unternehmen für Cybersicherheit, das eine realistische, intelligente Cyber-Bereich-Plattform für Schulungen, Tests und die Validierung von Sicherheitsteams, Tools und KI-Agenten bietet. Seine Plattform ermöglicht Live-Feuer-Übungen, Bedrohungsemulation (vollständige Kill-Chain und atomar), die Validierung von Kontrollen und agentischen Workflows sowie Tests zur Katastrophenwiederherstellung und Compliance; sie wird von Unternehmen und staatlichen Kunden genutzt, um Cyber-Bereitschaft und Widerstandsfähigkeit aufzubauen. Gegründet von Experten des U. S. Cyber Commands und des MIT Lincoln Laboratory, konzentriert sich SimSpace darauf, Einzelpersonen weiterzubilden, Teams zu stärken und KI-gesteuerte Verteidigungen in realistischen, produktionsähnlichen Simulationen zu evaluieren.

Beschreibung

• Define and own the technical architecture for authentication and authorization across the SimSpace platform, ensuring systems are secure, scalable, and maintainable. • Lead the design and development of Keycloak-based identity infrastructure, including federation, SSO, token management, and multi-tenant identity flows — multi-tenancy is a core architectural concern and experience designing systems with strong tenant isolation is highly valued. • Design and build the authorization layer for the SimSpace platform — including policy enforcement using a Relationship-Based Access Control (ReBAC) model (currently implemented with Topaz/OPA), authorization services, and the software infrastructure needed to deliver consistent, fine-grained access control across platform services. An understanding of ReBAC and how it differs from RBAC and ABAC models is essential. • Design and build new services that extend and augment the IAM stack — including directory services, user management services, and other components that integrate with or enhance Keycloak and Topaz. • Establish and evangelize cross-team authn/authz standards, providing technical guidance to engineering teams consuming IAM services to ensure correct and secure integration patterns. • Partner with technical leaders across the organization to translate business and security requirements into clear technical roadmaps and executable implementation plans. • Lead project scoping and estimation for new initiatives — breaking down ambiguous requirements into well-defined work, producing credible SWAGs early in the process, and driving planning that the team can execute against with confidence. • Identify and drive resolution of systemic technical risk, performance bottlenecks, and security gaps within the IAM stack. • Actively contribute to architectural review processes, raising the quality bar across the broader engineering organization. • Mentor and grow senior engineers on the IAM team, sharing deep expertise in software design, identity protocols, and security patterns.

🎯 Anforderungen

• Experienced Staff or Senior Software Engineer with a strong background in building platform or infrastructure services, with meaningful exposure to identity and access management concepts. • Proven ability to design, build, and ship production-grade distributed services — comfortable owning the full software development lifecycle from architecture through delivery. • Solid understanding of authentication protocols (OAuth 2.0, OIDC, SAML) and authorization patterns, with enough hands-on experience to make sound engineering decisions around identity systems. • Experience with Keycloak or comparable identity providers is a plus; willingness to develop deep expertise in Keycloak, Topaz/OPA, and adjacent technologies is essential. • Demonstrated ability to drive technical standards and architectural decisions across multiple teams, balancing idealism with pragmatic delivery. • Strong project scoping and estimation instincts — able to SWAG a new initiative quickly, break it into meaningful milestones, and produce plans that are realistic without being over-engineered. Contributes actively to quarterly planning cycles, helping the team arrive at commitments that are grounded in technical reality. • Strong communicator who can translate complex security and identity concepts for both technical and non-technical audiences. • Proficient in modern software engineering practices: API design, service decomposition, testing strategies, and CI/CD. • Experience with Kubernetes and modern container-based infrastructure as the environment in which these services operate. Comfort with self-hosted, on-premises infrastructure is a strong plus — SimSpace operates its own data centers and candidates should be prepared for the operational realities that come with that. • Comfortable operating with ambiguity — at the Staff level, the roadmap isn't always fully defined, and this role is expected to help shape it. We're looking for someone who drives clarity rather than waiting for it. • Experience working in security-sensitive or compliance-driven environments (DoD, FedRAMP, SOC 2, or similar) is a strong plus.

🏖️ Vorteile

• Comprehensive medical, dental, and vision benefits, plus savings plans—coverage starts on day one! • Access to company-paid counseling, coaching, and resources for you and your family through Spring Health. • Plan for your future with a 401(k)-retirement savings plan featuring a company match. • Take the time you need with unlimited vacation and dedicated health & wellness days. SimSpace provides flexible solutions to meet the diverse work-life needs of team members. • Paid leave plans to support you and your loved ones during life’s most important moments. • Equity stock options at hire, with annual performance-based grants—become an invested stakeholder in our shared success. • Earn $1,500–$3,500 for every qualified hire through our employee referral program. • Full- and partial- subsidized membership plans and equipment discounts to help you reach your personalized fitness goals. • Access a LinkedIn Learning membership to prioritize your personal and professional development. • Monthly reimbursements for meaningful connections with teammates through our SocialSpace Community. • Legal plan coverage, pet insurance, wellness reimbursements, and more to simplify life’s details.