> Markdown version of [/jobs/ext/4628686-software-engineer-security-platform](https://www.wearedevelopers.com/jobs/ext/4628686-software-engineer-security-platform). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Software Engineer, Security Platform

- **Company:** AALYRIA TECHNOLOGIES, INC.
- **Location:** United States (Remote available)
- **Experience:** Expert
- **Contract:** Permanent contract
- **Skills:** Application Programming Interfaces (APIs), Cloud Computing, Key Management, OpenID, Public Key Infrastructure, Role-Based Access Control, Software Engineering, Systems Integration, Data Logging, Okta, Backend, Kubernetes, Information Technology
- **Published:** November 7, 2026
- **Apply:** https://startup.jobs/software-engineer-security-platform-aalyria-10704626

## About the Role

* 5+ years of backend software engineering on production services
 * Experience in Go, or backend experience in a comparable language and readiness to work in Go daily
 * Hands on experience contributing to at least one of: an authentication or authorization system inside a product, an identity provider integration, a certificate authority, or a secrets or key management service
 * Understanding of how token based authentication fails, including audience confusion, unverified issuers, key confusion, and redirect handling at token endpoints, and how to prevent those failures
 * Working knowledge of Kubernetes and cloud infrastructure
 * Comfort owning a component in production, including on call rotations and incident response
 * Clear written and verbal communication, including explaining security tradeoffs to other engineers, * Experience building for regulated, disconnected, or high assurance environments
 * Experience integrating or operating an OIDC provider such as Zitadel, Keycloak, Okta, Auth0, or comparable
 * Experience with authorization models such as policy engines, RBAC, or ReBAC
 * Experience with SPIFFE/SPIRE, Vault, cloud KMS, or HSM backed key management
 * Experience with audit logging or evidence generation for FedRAMP, DoD Impact Levels, or a comparable regime
 * Experience threat modeling the services you build
 * Bachelor's degree in Computer Science or a related technical field, or equivalent practical experience, * U.S. citizen or national
 * U.S. lawful permanent resident (green card holder)
 * Refugee under 8 U.S.C. 1157
 * Asylee under 8 U.S.C. 1158

(B) Be eligible to access export-controlled information without requiring an export authorization.

(C) Be eligible and reasonably likely to obtain the necessary export authorization from the appropriate U.S. government agency.

## Description

As a Software Engineer on the Security Platform team, you'll build the identity, credentials, and audit capabilities that secure Spacetime. The team owns security for Aalyria products, and we build each capability once so it works the same in every environment Spacetime ships into. A system built this way produces its own compliance evidence. You'll work with senior engineers on the team and with product engineers across Aalyria., * Build authentication and authorization capabilities for Spacetime, including token validation, trust anchors, and the permission model operators configure

 * Implement authorization that holds up under delegation, multi tenancy, and machine to machine access
 * Build and maintain PKI components: certificate issuance, rotation, and revocation
 * Build workload identity and the libraries services use to present it
 * Build and maintain the auth SDKs that Aalyria engineering teams and customers use to reach Spacetime APIs
 * Build the access controls for secrets and keys, and the client libraries teams use to reach them
 * Implement audit and structured logging that makes authorization decisions reconstructable after the fact, including in regulated, classified, and disconnected environments
 * Contribute to threat models and build mitigations that fix root causes rather than single findings
 * Run what you build in production: availability, upgrades, security maintenance, on call, and incident response
 * Work with product, infrastructure, and developer platform engineers to turn their requirements into capabilities they adopt on their own, and apply the platform's security standards for hardened images, supply chain, and pipeline gates