Job description

HADRIAN - MANUFACTURING THE FUTURE Hadrian is building autonomous factories to reindustrialize America. By combining AI, advanced software, robotics, and full-stack manufacturing, we help aerospace and defense companies build rockets, satellites, aircraft, ships, and other mission-critical systems up to 10x faster and at significantly lower cost. Following our $1.37B Series D at a $7.87B valuation, Hadrian is rapidly expanding our manufacturing footprint, launching new capabilities across welding, casting, forging, electronics, additive manufacturing, and more, while scaling our Factory-as-a-Service platform to transform how critical products are built. Backed by leading investors including JPMorgan Chase, Valor Equity Partners, Andreessen Horowitz, Founders Fund, 137 Ventures, Lux Capital, T. Rowe Price, and Morgan Stanley, we’re building the future of American manufacturing—and looking for exceptional people to help make it happen. If you’re ready to take on the most challenging and rewarding work of your career while helping create American manufacturing jobs for generations to come, you’re exactly who we’re looking for. The Role As our Senior Identity Engineer, you will own workforce and workload identity end-to-end — SSO, MFA, the joiner-mover-leaver lifecycle, privileged access, secrets, and service/machine identity — across corporate, cloud, and factory systems that handle export-controlled technical data. You will build an automation-first, least-privilege identity program that shrinks our largest attack surface while keeping engineers fast. This is a hands-on individual-contributor role on a small, high-leverage security team in Los Angeles. What You’ll Do - Design, implement, and operate our IdP stack (e.g., Okta, Entra, Google Workspace, Auth0, or Zitadel) — SSO, SCIM provisioning, and phishing-resistant MFA — and build the systems around it. - Build identity systems at scale that put OAuth 2.0 / OIDC / SAML and modern authorization models (RBAC and relationship-based access control) to work in production. - Own cloud identity end-to-end — Azure service principals, AWS IAM, and workload/service identity — and tie those identities cleanly to the underlying infrastructure. - Work cross-functionally to help other teams meet their identity needs, and automate the access lifecycle (joiner-mover-leaver) and reviews. - Partner with Detection & Response and Compliance/FSO so identity telemetry is detectable, actionable, and audit-ready. What We’re Looking For - You can build. Strong software engineering fundamentals and a track record of shipping identity systems at scale — not just configuring a vendor tool or leaning on AI-assisted coding. - Real command of core identity concepts — OAuth 2.0 flows, OIDC, SAML, RBAC, and relationship-based access control (ReBAC) — and the ability to design systems that exploit these protocols well. - Hands-on depth with one or more IdPs (Okta / Entra / Google Workspace / Auth0 / Zitadel), since day-to-day is implementing, designing, and integrating these platforms. - Cloud identity depth — Azure service principals, AWS IAM — and a clear grasp of how those identities map to real infrastructure. - The autonomy and urgency to own the identity domain end-to-end on a small, high-leverage team with minimal direction. What Will Set You Apart - Fine-grained authorization at scale (ReBAC with OpenFGA / Zanzibar-style systems) built and run in production. - Identity engineering for OT/manufacturing or other regulated, controlled environments. - Large-scale passkey/FIDO2 or PAM (CyberArk/Teleport) rollouts, and secrets management with HashiCorp Vault. - Experience building on a small, high-automation team where output-per-engineer is the measure; detection-engineering and ITAR-aware access design. BENEFITS FOR FULL-TIME EMPLOYEES - Medical, dental, vision, and life insurance plans for employees 401k - Relocation support may be provided for certain situations, based on business need. - Flexible vacation policy - Equity ITAR REQUIREMENTS To conform to U.S. Government export regulations, including the International Traffic in Arms Regulations (ITAR) you must be a U.S. citizen or national, lawful permanent resident, protected individual as defined by 8 U.S.C. 1324b(a)(3), or eligible to obtain the required authorizations from the U.S. Department of State. Learn more about the ITAR here. USE OF AI IN HIRING Hadrian uses AI-assisted tools in our recruiting and hiring processes to help our team work more efficiently. This may include tools that help organize and analyze recruiting data, as well as an AI-powered notetaker that can record and transcribe interviews and help coordinate feedback. These tools support our team and are not used to make hiring decisions. All candidate evaluations and hiring decisions are performed by humans. If an interview will be recorded, you will be notified in advance and may opt out at any time with no impact on your candidacy. Candidate data processed through these tools is subject to the same protections described in our Privacy Policy hadrian.co. CONSIDERATION OF CRIMINAL HISTORY Hadrian will consider for employment qualified applicants with criminal histories in a manner consistent with the requirements of all applicable laws. We do not ask about criminal history on our application, and we do not consider criminal history before making a conditional offer of employment. HADRIAN IS AN EQUAL OPPORTUNITY EMPLOYER Hadrian does not unlawfully discriminate on the basis of race, color, religion, gender, national origin/ethnicity, veteran status, disability status, age, sexual orientation, marital status, mental status, physical disability or any other legally protected status. When necessary, the Company also makes reasonable accommodations for disabled candidates and employees, including for candidates or employees who are disabled by pregnancy, childbirth, or related medical conditions.

Requirements

Must-haves

If you’re ready to take on the most challenging and rewarding work of your career while helping create American manufacturing jobs for generations to come, you’re exactly who we’re looking for.
What You’ll Do
Design, implement, and operate our IdP stack (e.g., Okta, Entra, Google Workspace, Auth0, or Zitadel) — SSO, SCIM provisioning, and phishing-resistant MFA — and build the systems around it.
Build identity systems at scale that put OAuth 2.0 / OIDC / SAML and modern authorization models (RBAC and relationship-based access control) to work in production.
Own cloud identity end-to-end — Azure service principals, AWS IAM, and workload/service identity — and tie those identities cleanly to the underlying infrastructure.
Work cross-functionally to help other teams meet their identity needs, and automate the access lifecycle (joiner-mover-leaver) and reviews.
Partner with Detection & Response and Compliance/FSO so identity telemetry is detectable, actionable, and audit-ready.
What We’re Looking For
You can build. Strong software engineering fundamentals and a track record of shipping identity systems at scale — not just configuring a vendor tool or leaning on AI-assisted coding.
Real command of core identity concepts — OAuth 2.0 flows, OIDC, SAML, RBAC, and relationship-based access control (ReBAC) — and the ability to design systems that exploit these protocols well.
Hands-on depth with one or more IdPs (Okta / Entra / Google Workspace / Auth0 / Zitadel), since day-to-day is implementing, designing, and integrating these platforms.
Cloud identity depth — Azure service principals, AWS IAM — and a clear grasp of how those identities map to real infrastructure.
The autonomy and urgency to own the identity domain end-to-end on a small, high-leverage team with minimal direction.
What Will Set You Apart
Fine-grained authorization at scale (ReBAC with OpenFGA / Zanzibar-style systems) built and run in production.
Identity engineering for OT/manufacturing or other regulated, controlled environments.
Large-scale passkey/FIDO2 or PAM (CyberArk/Teleport) rollouts, and secrets management with HashiCorp Vault.
Experience building on a small, high-automation team where output-per-engineer is the measure; detection-engineering and ITAR-aware access design.
Relocation support may be provided for certain situations, based on business need.
Flexible vacation policy

Nice-to-haves

None flagged.

Application prep

Use the role’s language and application details while tailoring your materials.

Keywords to mirror

aiazureawsdesign systems

Platform: ashby
Effort: quick

Benefits

Benefits detected in the listing.

Dental

Vision

401k