Software Engineering Manager of Platform Authentication & Authorization

Job description

Vantor is forging the new frontier of spatial intelligence, helping decision makers and operators navigate what’s happening now and shape what’s coming next. Vantor is a place for problem solvers, changemakers, and go-getters—where people are working together to help our customers see the world differently, and in doing so, be seen differently. Come be part of a mission, not just a job, where you can: Shape your own future, build the next big thing, and change the world. To be eligible for this position, you must be a U.S. Citizen. This position requires an active U.S. Government security clearance, applicants who do not currently hold the required clearance will not be eligible for consideration. Employment for cleared roles is contingent upon verification of clearance status.

 Export Control/ITAR: Certain roles may be subject to U.S. export control laws, requiring U.S. person status as defined by 8 U.S.C. 1324b(a)(3). Please review the job details below. Vantor is seeking a Manager of Software Engineering to lead the Platform Authentication & Authorization team. The team designs, builds, tests, delivers, and operates the identity and access capabilities that support users, administrators, and products across the platform. The Role This role combines people leadership, technical direction, and delivery accountability. The Manager will establish priorities, develop engineers, allocate team capacity, and ensure that the team delivers secure, scalable, and reliable software. The role requires close partnership with Engineering, Product, Security, Compliance, customers, and other functional teams to turn business and technical objectives into executable plans and successful outcomes. This is a high-ownership role with a strong security and identity focus. The team's work directly affects every platform user and the administrators responsible for managing access. The ideal candidate will bring practical expertise in modern authentication and authorization, including OAuth 2.0, OpenID Connect (OIDC), MFA, SSO, federation, token lifecycle management, claims, scopes, and policy enforcement. You are comfortable guiding decisions in complex, distributed systems while empowering engineers to own solution design and implementation. Vantor is an AI-forward engineering organization. We use AI-assisted development tools for design exploration, implementation, testing, documentation, threat-model checklists, migration planning, troubleshooting, and other repetitive engineering work. The Manager will help the team use these tools responsibly, with appropriate human review, validation, and security-aware engineering judgment. This position is located in Westminster. Candidates must be U.S. citizens. What You’ll Do Lead the Team and Deliver Results Lead, coach, and develop a team of software engineers with varied skills and areas of expertise. Establish team goals, performance expectations, development plans, and accountability; provide timely, meaningful feedback. Translate organizational and product objectives into clear engineering priorities, plans, schedules, and measurable outcomes. Plan staffing and capacity, identify skill gaps, allocate resources, and support budget and cost objectives as appropriate. Partner with Product Management and stakeholders to clarify requirements, evaluate priorities and tradeoffs, and translate business needs into executable engineering work. Identify risks, dependencies, resource constraints, and competing priorities early; drive decisions and resolution. Coordinate work across engineering teams and functional organizations when delivery requires shared ownership or dependencies. Guide the team through complex software design, development, integration, testing, deployment, and production-support challenges. Improve engineering processes, practices, and operating procedures to strengthen delivery, quality, and team effectiveness. Foster a culture of ownership, collaboration, accountability, technical excellence, and continuous improvement. Lead the Platform Identity and Access Domain Oversee services supporting user identity, account lifecycle, access control, product entitlements, policy enforcement, and administrator workflows. Guide the design and implementation of OAuth 2.0 and OIDC flows, including authorization code with PKCE, client credentials, refresh tokens, token validation, token revocation, claims, scopes, and service-to-service authentication. Deliver secure MFA, SSO, federation, identity brokering, external identity-provider integration, and session-management capabilities. Configure, extend, and operate Keycloak, including realms, clients, roles, groups, protocol mappers, identity providers, administrative APIs, custom extensions, and production-support patterns. Guide development of the TypeScript/Vue 3 administrator application used to manage users, accounts, permissions, and policy-driven access. Ensure identity and access services are designed for appropriate availability, performance, observability, auditability, and operational support. Partner with Security and Compliance to apply threat modeling, secure SDLC practices, audit logging, secrets management, access reviews, vulnerability remediation, and relevant control expectations, including NIST, ISO 27001, and CMMC. Support capabilities that capture and surface platform usage and access data for reporting, billing, analytics, and operational insight. Promote and oversee AI-assisted engineering for implementation, test generation, documentation, troubleshooting, and design analysis, with disciplined validation and human review. Minimum Requirements U.S. citizenship and willingness and ability to obtain a U.S. Government security clearance. Bachelor’s degree in Computer Science, Software Engineering, Systems Engineering, or a related technical discipline; four additional years of relevant experience may substitute for the degree. Seven or more years of professional software engineering experience, including significant ownership of production systems. At least two years of engineering-management experience, or equivalent technical-leadership experience with responsibility for mentoring engineers, coordinating delivery, and leading through complex technical challenges. Experience leading, coaching, and developing engineers, including setting goals, establishing expectations, and providing performance feedback. Experience working in an Agile engineering environment, including practices such as test-driven development, behavior-driven development, continuous integration, and continuous delivery. Experience leading software modernization efforts or developing new product capabilities in complex technical environments. Strong understanding of the software development lifecycle, from requirements and architecture through development, testing, deployment, operations, and support. Demonstrated ability to guide the design of scalable, performant, and highly available cloud services, distributed systems, or microservice-oriented architectures. Strong understanding of production service operations, including SLAs, SLOs, incident management, observability, and operational readiness. Practical application of secure software design and delivery practices, such as threat modeling, audit logging, secrets handling, access-review workflows, vulnerability remediation, and secure SDLC controls. Experience building and consuming REST APIs with appropriate versioning, validation, authorization checks, observability, and error handling. Strong communication, judgment, and collaboration skills, with the ability to evaluate technical and organizational tradeoffs and influence across teams. Experience working with AI-assisted development tools, with disciplined validation and security-aware review of generated output. Preferred Qualifications Hands-on experience with Keycloak, including realm and client configuration, identity-provider integration, protocol mappers, roles and groups, administrative APIs, or identity-extension development. Deep practical knowledge of OAuth 2.0 and OIDC, including authorization code with PKCE, client credentials, refresh-token handling, JWT validation, key rotation, scopes, claims, token lifetimes, and revocation patterns. Strong working knowledge of Java and Spring Boot, including the broader Spring ecosystem. Experience with modern authentication and authorization practices, including MFA, SSO, federation, RBAC, ABAC or policy-based access control, identity lifecycle management, service accounts, and least-privilege design. Experience with relational databases, SQL, schema-migration tooling, and event-driven architectures using a message broker. Experience with TypeScript and a modern frontend framework such as Vue, React, or Angular. Development and architecture experience with AWS and related cloud services. Experience with Kubernetes or EKS, service meshes, multi-service environments, and hybrid deployments. Strong background in observability technologies such as Elastic, Grafana, OpenTelemetry, or AWS CloudWatch. What Success Looks Like Success in this role means building a strong software engineering team that delivers reliably, owns its commitments, makes sound technical decisions, and works effectively across organizational boundaries. This Manager will balance people leadership, technical judgment, delivery, resources, schedules, and business priorities while creating an environment in which engineers can perform at a high level. Vantor values diversity in the workplace and is an equal opportunity/affirmative action employer. All qualified applicants will receive consideration for employment without regard to sex, gender identity, sexual orientation, race, color, religion, national origin, disability, protected veteran status, age, or any other characteristic protected by law. Pay Transparency: To support pay transparency, Vantor includes salary ranges in all U.S. job postings. Starting pay for this role will fall within the listed range and will be based on factors such as experience, qualifications, skills, location, and market conditions. Candidates who meet the minimum requirements for the role should not expect to receive compensation at the top of the range. The listed range reflects the expected pay for this position, and final offers will be determined based on each candidate’s experience, expertise, and alignment with the role. ● The base pay for this position within Colorado is: $122,000.00 - $162,000.00 - $178,200.00 annually. For all other states, we use geographic cost of labor as an input to develop market-driven ranges for our roles, and as such, each location where we hire may have a different range. Benefits: Vantor offers a competitive total rewards package that goes beyond the standard, including a robust 401(k) with company match, mental health resources, and unique perks like student loan repayment assistance, adoption reimbursement and pet insurance to support all aspects of your life. You can find more information on our benefits at: https://www.Vantor.com/careers Additionally, this position is incentive eligible with a target based on contribution, company performance, and/or individual results achieved; the specific incentive plan and target amount will be determined based on the role and breadth of contributions. The application window is three days from the date the job is posted and will remain posted until a qualified candidate has been identified for hire. If the job is reposted regardless of reason, it will remain posted three days from the date the job is reposted and will remain reposted until a qualified candidate has been identified for hire. The date of posting can be found on Vantor's Career page at the top of each job posting. To apply, submit your application via Vantor's Career page. EEO Policy: Vantor is an equal opportunity employer committed to an inclusive workplace. We believe in fostering an environment where all team members feel respected, valued, and encouraged to share their ideas. All qualified applicants will receive consideration for employment without regard to race, color, religion, national origin, sex, gender identity, sexual orientation, disability, protected veteran status, age, or any other characteristic protected by law.