Principal Platform Engineer – Identity and Access Management

This is a fully remote position, open to applicants in United Kingdom.

📋 Description

• Serve as the technical expert on authorization and authentication for the Kairos and Nexus platforms.

• Design, engineer, and manage enterprise-level identity and access solutions.

• Collaborate directly with the team focused on the Authorization subdomain.

• Create and implement IAM patterns that become standard practices across IFS.

• Ensure that identity and access act as facilitators rather than obstacles.

• Develop the authorization APIs and SDKs utilized by product teams.

• Oversee the operation of the authorization engine: SpiceDB on PostgreSQL.

• Establish IAM patterns, standards, and optimal paths for product teams to securely implement.

• Offer subject-matter expertise on identity and access security.

⛳️ Requirements

• Proven experience in designing production-level AI applications.

• Expertise in architecting and engineering finely detailed authorization systems at scale.

• Practical experience with a relationship-based or policy-based authorization engine, preferably SpiceDB or similar Zanzibar-inspired systems.

• In-depth, hands-on knowledge of authorization models: relationship-based access control, role-based, and attribute-based.

• Experience in designing authorization schemas and permission structures.

• Familiarity with policy-as-code methodologies and tools.

• Understanding of managing the authorization engine in a production environment.

• Hands-on experience with Curity and/or Keycloak.

• Extensive knowledge of OAuth 2.0, OpenID Connect, and SAML 2.0.

• Experience with enterprise identity federation, SSO, and directory integration.

• Strong engineering skills across the NGA stack.

• Comfortable working in a cloud-native setup.

• Knowledge of secure coding practices and principles of security-by-design.

🏝️ Benefits

• Flexible work arrangements.

• Professional development opportunities.