What You’ll Do
Design, implement, and operate our IdP stack (e.g., Okta, Entra, Google Workspace, Auth0, or Zitadel) — SSO, SCIM provisioning, and phishing-resistant MFA — and build the systems around it.
Build identity systems at scale that put OAuth 2.0 / OIDC / SAML and modern authorization models (RBAC and relationship-based access control) to work in production.
Own cloud identity end-to-end — Azure service principals, AWS IAM, and workload/service identity — and tie those identities cleanly to the underlying infrastructure.
Work cross-functionally to help other teams meet their identity needs, and automate the access lifecycle (joiner-mover-leaver) and reviews.
Partner with Detection & Response and Compliance/FSO so identity telemetry is detectable, actionable, and audit-ready.
What We’re Looking For
You can build. Strong software engineering fundamentals and a track record of shipping identity systems at scale — not just configuring a vendor tool or leaning on AI-assisted coding.
Real command of core identity concepts — OAuth 2.0 flows, OIDC, SAML, RBAC, and relationship-based access control (ReBAC) — and the ability to design systems that exploit these protocols well.
Hands-on depth with one or more IdPs (Okta / Entra / Google Workspace / Auth0 / Zitadel), since day-to-day is implementing, designing, and integrating these platforms.
Cloud identity depth — Azure service principals, AWS IAM — and a clear grasp of how those identities map to real infrastructure.
The autonomy and urgency to own the identity domain end-to-end on a small, high-leverage team with minimal direction.
What Will Set You Apart
Fine-grained authorization at scale (ReBAC with OpenFGA / Zanzibar-style systems) built and run in production.
Identity engineering for OT/manufacturing or other regulated, controlled environments.
Large-scale passkey/FIDO2 or PAM (CyberArk/Teleport) rollouts, and secrets management with HashiCorp Vault.
Experience building on a small, high-automation team where output-per-engineer is the measure; detection-engineering and ITAR-aware access design.
BENEFITS FOR FULL-TIME EMPLOYEES
- Medical, dental, vision, and life insurance plans for employees
- 401k
Relocation support may be provided for certain situations, based on business need.
Flexible vacation policy
Equity
ITAR REQUIREMENTS
To conform to U.S. Government export regulations, including the International Traffic in Arms Regulations (ITAR) you must be a U.S. citizen or national, lawful permanent resident, protected individual as defined by 8 U.S.C. 1324b(a)(3), or eligible to obtain the required authorizations from the U.S. Department of State. Learn more about the ITAR here.
USE OF AI IN HIRING
Hadrian uses AI-assisted tools in our recruiting and hiring processes to help our team work more efficiently. This may include tools that help organize and analyze recruiting data, as well as an AI-powered notetaker that can record and transcribe interviews and help coordinate feedback. These tools support our team and are not used to make hiring decisions. All candidate evaluations and hiring decisions are performed by humans. If an interview will be recorded, you will be notified in advance and may opt out at any time with no impact on your candidacy. Candidate data processed through these tools is subject to the same protections described in our Privacy Policy https://www.hadrian.co/privacy-policy.
CONSIDERATION OF CRIMINAL HISTORY
Hadrian will consider for employment qualified applicants with criminal histories in a manner consistent with the requirements of all applicable laws. We do not ask about criminal history on our application, and we do not consider criminal history before making a conditional offer of employment.
HADRIAN IS AN EQUAL OPPORTUNITY EMPLOYER
Hadrian does not unlawfully discriminate on the basis of race, color, religion, gender, national origin/ethnicity, veteran status, disability status, age, sexual orientation, marital status, mental status, physical disability or any other legally protected status. When necessary, the Company also makes reasonable accommodations for disabled candidates and employees, including for candidates or employees who are disabled by pregnancy, childbirth, or related medical conditions.
