Software Engineering Manager of Platform Authentication & Authorization

Vantor is forging the new frontier of spatial intelligence, helping decision makers and operators navigate what’s happening now and shape what’s coming next. Vantor is a place for problem solvers, changemakers, and go-getters—where people are working together to help our customers see the world differently, and in doing so, be seen differently. Come be part of a mission, not just a job, where you can:
Shape your own future, build the next big thing, and change the world.

To be eligible for this position, you must be a U.S. Citizen.

This position requires an active U.S. Government security clearance, applicants who do not currently hold the required clearance will not be eligible for consideration. Employment for cleared roles is contingent upon verification of clearance status. Export Control/ITAR:
Certain roles may be subject to U.S. export control laws, requiring U.S. person status as defined by 8 U.S.C. 1324b(a)(3).

Vantor is seeking a Manager of Software Engineering to lead the Platform Authentication & Authorization team. The team designs, builds, tests, delivers, and operates the identity and access capabilities that support users, administrators, and products across the platform.

• Lead, coach, and develop a team of software engineers with varied skills and areas of expertise.
• Establish team goals, performance expectations, development plans, and accountability; provide timely, meaningful feedback.
• Translate organizational and product objectives into clear engineering priorities, plans, schedules, and measurable outcomes.
• Plan staffing and capacity, identify skill gaps, allocate resources, and support budget and cost objectives as appropriate.
• Partner with Product Management and stakeholders to clarify requirements, evaluate priorities and tradeoffs, and translate business needs into executable engineering work.
• Identify risks, dependencies, resource constraints, and competing priorities early; drive decisions and resolution.
• Coordinate work across engineering teams and functional organizations when delivery requires shared ownership or dependencies.
• Guide the team through complex software design, development, integration, testing, deployment, and production-support challenges.
• Improve engineering processes, practices, and operating procedures to strengthen delivery, quality, and team effectiveness.
• Foster a culture of ownership, collaboration, accountability, technical excellence, and continuous improvement.

• Oversee services supporting user identity, account lifecycle, access control, product entitlements, policy enforcement, and administrator workflows.
• Guide the design and implementation of OAuth 2.0 and OIDC flows, including authorization code with PKCE, client credentials, refresh tokens, token validation, token revocation, claims, scopes, and service-to-service authentication.
• Deliver secure MFA, SSO, federation, identity brokering, external identity-provider integration, and session-management capabilities.
• Configure, extend, and operate Keycloak, including realms, clients, roles, groups, protocol mappers, identity providers, administrative APIs, custom extensions, and production-support patterns.
• Guide development of the Type Script/Vue 3 administrator application used to manage users, accounts, permissions, and policy-driven access.
• Ensure identity and access services are designed for appropriate availability, performance, observability, auditability, and operational support.
• Partner with Security and Compliance to apply threat modeling, secure SDLC practices, audit logging, secrets management, access reviews, vulnerability remediation, and relevant control expectations, including NIST, ISO 27001,…