Architect Identity Trust

Role Summary

This role focuses on building the identity and trust foundation behind an internet simulation platform. The engineer will work at the intersection of Active Directory, PKI, authentication, and simulated internet services, helping create the infrastructure that enables realistic digital identities and trusted environments for both human and automated systems.

Desired Skills:

• B2 and above English level
• 7+ years of experience as a software engineer
• Strong experience with identity infrastructure and security systems
• Deep knowledge of Active Directory, AD provisioning, OUs, Group Policy, and Kerberos
• Strong experience designing REST APIs and distributed systems
• Solid knowledge of PKI, Certificate Authorities, and certificate lifecycle management
• Experience with AWS, GCP, and/or Azure identity services
• Experience with SSO, identity federation, and heterogeneous identity systems

Nice to Have:

• SPF, DKIM, DMARC
• Cybersecurity or red team infrastructure
• Automated certificate issuance and trust-store management
• Windows and Linux identity and certificate management

Responsibilities

• Design and own APIs for provisioning and managing digital personas across Active Directory and simulated internet services.
• Build and maintain services for AD domain, user, group, OU, and Group Policy management.
• Design and operate PKI infrastructure, including root CAs, intermediate CAs, certificate issuance, and trust distribution.
• Manage identity and account lifecycles across AD, SSO, and heterogeneous internet services.
• Design reliable systems with idempotency, partial failure handling, eventual consistency, and reconciliation.
• Define and maintain identity data models across multiple backends and services.
• Collaborate with orchestration and emulation teams to support complex identity and scenario requirements.
• Contribute to platform architecture and security decisions related to identity, authentication, and trust.

Who you are:

• Strong sense of ownership for critical identity and security infrastructure.
• Analytical thinker with strong API design and distributed systems fundamentals.
• Comfortable working with stateful, distributed, and failure-prone systems.
• Security-minded engineer with a deep understanding of identity and trust.
• Collaborative team player who enjoys solving complex infrastructure problems.