Senior IAM Software Engineer

Rivian and Volkswagen Group Technologies

. Design, build, and operate security-critical identity and authorization services in Go on Kubernetes/AWS .

Posted 9/22/2026full-timeIrvine • California • United StatesSenior💰 $149,800 - $205,900 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in building and operating security-critical identity and authorization services using Go, Kubernetes, and AWS. Proficient in implementing fine-grained authorization models and cybersecurity protections while collaborating with cross-functional teams.

Highest-signal resume keywords

Go ProgrammingKubernetesAWSOAuth2/OIDCSpiceDB

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

GRPCRESTProtobuf/API DesignJWTMTLSSQL DatastorePostgresCockroachDBHelmArgoCD

Soft Skills

MentorshipCollaborationIncident Response

Tools & Technologies

EKSIAMKMSVPC NetworkingSPIFFESPIREOry HydraOry KratosKafkaNATS

Industry Keywords

CybersecurityAuthorizationIdentity ManagementCloud-Native Best PracticesSecurity Architecture

Tech Stack

Tools & technologies

AWSCloudCyber SecurityGRPCKafkaKubernetesPostgresSQLGo

About the role

Key responsibilities & impact

Design, build, and operate security-critical identity and authorization services in Go on Kubernetes/AWS
Own and evolve the SpiceDB authorization data model, including resource hierarchies and roles/permissions
Provide APIs, SDKs, and tooling for teams to manage permissions
Demonstrate cloud-native best practices through code reviews, mentorship, and partnership with cloud-first teams
Participate in team incident response and on-call processes
Partner with the PKI team and service owners to adopt mTLS and workload identity using SPIFFE/SPIRE
Guide teams integrating certificate-based identity with SpiceDB-backed permissions
Mitigate vulnerabilities identified or reported by internal and external parties
Implement cybersecurity protections to comply with regulations and industry standards
Drive the IAM platform from requirements through implementation and operationalization across vehicle software and enterprise teams

Requirements

What you’ll need

Bachelor’s degree in Computer Science, Computer Engineering, or similar field, or equivalent experience
5+ years building and operating production backend services
Strong Go or comparable experience building gRPC/REST services, including protobuf/API design and client SDKs
Hands-on experience with OAuth2/OIDC, JWT, mTLS, and fine-grained/relationship-based authorization, such as SpiceDB/Zanzibar, OPA, or Cedar
Experience running production services on Kubernetes and AWS, including Helm/ArgoCD, EKS, IAM, KMS, and VPC networking
Experience with a SQL datastore such as Postgres or CockroachDB
Experience working cross functionally with heterogeneous engineering teams to ensure reliability of security-critical services
Experience delivering platform capabilities to heterogeneous internal engineering teams and leading projects from planning through completion
SPIFFE/SPIRE or other workload-identity systems preferred
PKCS#11 / secure-element integration preferred
Ory Hydra/Kratos or similar identity providers preferred
Event streaming with Kafka or NATS preferred
Bazel monorepos preferred
Contributions to ADRs or security architecture documentation preferred
Authorization to work in the United States

Benefits

Comp & perks

Annual company performance bonus program; annual target bonus of 10%
Equity in the form of Restricted Stock Units (RSUs)
Health coverage
Retirement savings
Time off
Family planning programs