Staff Software Engineer, IAM

Job Summary

As the technical authority for identity, authentication, and authorization across the SimSpace platform, the full-time Staff Software Engineer, IAM will define and own the architecture for secure, scalable systems while leading the design and development of Keycloak-based identity infrastructure and authorization policies in a remote environment.

Key responsibilities

• Define and own the technical architecture for authentication and authorization across the platform
• Lead the design and development of Keycloak-based identity infrastructure and authorization services
• Establish cross-team authentication and authorization standards, providing technical guidance to ensure secure integration patterns

Required qualifications

• Strong background in building platform or infrastructure services with exposure to identity and access management concepts
• Proven ability to design, build, and ship production-grade distributed services
• Solid understanding of authentication protocols (OAuth 2.0, OIDC, SAML) and authorization patterns
• Experience with Keycloak or comparable identity providers is a plus
• Experience working in security-sensitive or compliance-driven environments (DoD, FedRAMP, SOC 2, or similar) is a strong plus