Staff Software Engineer, Identity & Access Management

Benefits

Additional Information

SimSpace serves as an AI Proving Ground where organizations can confidently train, test, and outmaneuver adversaries in any environment. Trusted by allied governments, militaries, enterprises, and research institutions worldwide, SimSpace enables adaptive, AI-ready defenses that stay ahead of evolving threats. Founded in 2015 by experts from U.S. Cyber Command and MIT Lincoln Laboratory, the platform unifies training, testing, and validation in a realistic, live-fire simulation-helping teams evaluate security investments, optimize performance, and compress cyber readiness cycles from months to days. Why join SimSpace? We are an organization that is focused on building our culture and mindfully enhancing our atmosphere every day which is why we have collaborated on an integral value system. Our governing philosophy of being Human Centered is deeply embedded within our value system. We apply this philosophy to every one of our internal team members, external clients, and their customers. How Do We Work? We believe that people are at the center of everything we do. SimSpace fosters a culture of continuous learning, curiosity, and professional growth. That belief shows up in action: in-house training, internal and external learning platforms, cyber conferences, industry events, and dedicated time for skill development. Our people are empowered to shape their careers - and it shows. Year over year, SimSpace consistently outperforms industry benchmarks in internal mobility, promotions, and total rewards growth. Who Thrives Here? We are a team of innovators, protectors, and problem-solvers. We believe diversity of thought and experience fuels better solutions, and we're committed to building teams that reflect the communities we serve. Whether you're remote or office-based, you'll collaborate with talented colleagues across departments and time zones, united by the mission to create a safer digital world. We invite you to apply today! We are looking for a Staff Software Engineer, Identity & Access Management, to serve as the technical authority for identity, authentication, and authorization across the SimSpace platform. The ideal candidate will possess deep expertise in designing and building secure, scalable software systems, a strong foundation in modern IAM concepts, and the ability to drive technical direction across teams in a complex, security-focused environment. In this position, you'll own the architecture and technical strategy for the IAM stack, partnering with engineering teams across the organization to establish authn/authz standards and ensure consistent, secure access patterns throughout the SimSpace platform. The focus is on software engineering leadership - designing and building the services that underpin identity and access management at SimSpace, solving hard problems, and raising the engineering bar across the team. Specifically, this position will be responsible for: Identity Provider architecture and service development built on Keycloak Authorization policy design and enforcement using a Relationship-Based Access Control (ReBAC) model implemented in Topaz/OPA Design and development of IAM-adjacent services including directory services, user management, and other platform integrations that augment the core identity stack Cross-team authn/authz standards, patterns, and platform integrations What will you be doing as a Staff Software Engineer, IAM at SimSpace? Define and own the technical architecture for authentication and authorization across the SimSpace platform, ensuring systems are secure, scalable, and maintainable. Lead the design and development of Keycloak-based identity infrastructure, including federation, SSO, token management, and multi-tenant identity flows - multi-tenancy is a core architectural concern and experience designing systems with strong tenant isolation is highly valued. Design and build the authorization layer for the SimSpace platform - including policy enforcement using a Relationship-Based Access Control (ReBAC) model (currently implemented with Topaz/OPA), authorization services, and the software infrastructure needed to deliver consistent, fine-grained access control across platform services. An understanding of ReBAC and how it differs from RBAC and ABAC models is essential. Design and build new services that extend and augment the IAM stack - including directory services, user management services, and other components that integrate with or enhance Keycloak and Topaz. Establish and evangelize cross-team authn/authz standards, providing technical guidance to engineering teams consuming IAM services to ensure correct and secure integration patterns. Partner with technical leaders across the organization to translate business and security requirements into clear technical roadmaps and executable implementation plans. Lead project scoping and estimation for new initiatives - breaking down ambiguous requirements into well-defined work, producing c