True Anomaly

True Anomaly

Senior DevOps Engineer, Identity & Authorization

Denver, CO or Long Beach, CA · Senior · Contract

No sponsorship$207k-$800kDetected 1 day ago
TypeScriptPythonGoBashAWSAzureKubernetesDevOpsCybersecurityZero TrustCISSP

About the role

  • If you have a disability or additional need that requires accommodation, please do not hesitate to let us.

Responsibilities

  • Design and implement multi-tenant isolation strategies ensuring zero lateral movement between customer/program boundaries
  • Design authorization models (RBAC, ABAC, ReBAC) for space operations use cases with fine-grained access control requirements
  • Implement workload identity frameworks (SPIFFE/SPIRE, K8s projected tokens) and service mesh authentication (Istio, Linkerd, Cilium)
  • Build policy-as-code systems (OPA/Gatekeeper, Kyverno, Cedar) for automated compliance enforcement at runtime
  • Collaborate with security team on secret management strategy (HashiCorp Vault, Azure Key Vault) with encryption key lifecycle for IL6 environments

Requirements

  • Kubernetes Production Experience: Deployed and operated production Kubernetes clusters with 3+ years experience
  • Identity Infrastructure: Production experience deploying/operating at least one K8s-native IdP (Keycloak, Dex, etc.) or enterprise IAM system
  • Compliance Frameworks: Working knowledge of NIST 800-53, CMMC Level 3+, or FedRAMP High requirements
  • Scripting/Automation: Proficiency in Python, Go, or Bash for automation and tooling
  • Work Location -Successful candidates will be located near Denver or Colorado Springs. While we observe a hybrid work environment, some work must be done on site.
  • To conform to U.S. Government space technology export regulations, including the International Traffic in Arms Regulations (ITAR) you must be a U.S. citizen, lawful permanent resident of the U.S., protected individual as defined by 8 U.S.C. 1324b(a)(3), or eligible to obtain the required authorizations from the U.S. Department of State.

Nice to have

  • CISSP, CCSP, or other security certifications
  • Contributed to open-source identity/auth projects (Keycloak, Dex, OPA, SPIFFE, etc.)
  • Experience with cross-domain solutions (CDS) or multi-level security (MLS) systems
  • Kubernetes CKS (Certified Kubernetes Security Specialist) certification
  • Previous experience at defense prime, IC contractor, or FAANG Gov (AWS/Azure/Google public sector)
  • Work environment -the work environment
  • temperature, noise level, inside or outside, or other factors that will affect the person's working conditions while performing the job.
  • Physical demands -the physical demands of the job, including bending, sitting, lifting and driving.

Skills

  • Active TS/SCI clearance (or ability to start immediately upon clearance grant)
  • IL4/IL5 deployment and operations experience (IL6 is nice-to-have but not required)

Compensation

  • $150,000 - $225,000
  • Your actual level and base salary will be determined on a case-by-case basis and may vary based on the following considerations: job-related knowledge and skills, education, location, and experience.

Benefits

  • Equity + Benefits including Health, Dental, Vision, HRA/HSA options, PTO and paid holidays, 401K, Parental Leave

Company info

  • True Anomaly delivers decisive capabilities for space superiority.
  • We build autonomous spacecraft, advanced payloads, mission software, and space-based interceptors - enabling the U.S. and its Allies to secure the space environment and counter threats from the ultimate high ground.
  • Be the offset. We create asymmetric advantages with creativity and ingenuity.
  • What would it take? We challenge assumptions to deliver ambitious results.
  • It's the people. Our team is our competitive advantage and we are better together.
  • Software is the central nervous system for True Anomaly's engineering and product thesis.
  • As we deploy our space operations platform into classified environments, identity and authorization become critical technical challenges requiring deep specialization.
  • True Anomaly is seeking a highly experienced Senior Identity & Authorization Engineer to build the multi-tenant identity infrastructure that enables secure operations at IL6 (SECRET) and beyond.
  • You'll deploy and integrate Kubernetes-native identity platforms, implement fine-grained authorization models for space operations, and provide deep technical expertise on identity/auth during compliance processes.
  • Working closely with our security and platform teams, you'll evaluate and integrate modern authorization frameworks (ReBAC, SPIFFE/SPIRE, OPA), build policy-as-code enforcement systems, and ensure our identity architecture meets the rigorous standards required for classified environments.
  • You do not need to have experience building space ground systems or experience in aerospace.
  • You'll have ownership of challenging, greenfield problems and a chance to fundamentally impact the outcome of future conflict (and the future of the company), all while enjoying world-class benefits including platinum healthcare, flexible work hours/location, highly competitive compensation and a generous stock options package.
  • Partner with customers and government auditors during ATO processes to demonstrate compliance and address findings

Visa & Work Authorization

  • citizen or lawful permanent resident), active clearance strongly preferred
Apply directly at True Anomaly →Create a free account for alerts like thisView True Anomaly immigration profile

This listing is sourced directly from True Anomaly's careers page and normalized into a canonical job model.