Principal Platform Engineer – Identity and Access Management

🕒 July 29

🇬🇧 United Kingdom – Remote

⏰ Full Time

🔴 Lead

🏗️ Platform Engineer

🇬🇧 UK Skilled Worker Visa Sponsor

This company has sponsored UK Skilled Worker visas in the past.

👻 Ghost score 11%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

IFS

WebsiteLinkedInAll Job Openings

5001 - 10000 employees

Founded 1983

🏗️ Construction

🏭 Manufacturing

📦 Logistics

💰 Secondary Market on 2022-03

Construction • Manufacturing • Logistics

IFS is an enterprise software company providing solutions for various industries, including aerospace and defense, construction and engineering, energy, utilities, and resources, manufacturing, services, and telecommunications. The company offers a wide range of software products, including enterprise asset management, field service management, enterprise resource planning, and solutions leveraging artificial intelligence such as IFS. ai. These solutions are designed to optimize asset lifecycle management, improve customer engagement, and enhance operational efficiencies. IFS Cloud provides a comprehensive platform for digital transformation, helping businesses to harness data and drive insights across their operations.

📋 Description

• Be the technical authority on authorisation and authentication across the Kairos and Nexus platforms • Architect, engineer, and operate enterprise-scale identity and access solutions • Work directly with the team building the Authorisation subdomain • Design and implement IAM patterns that are adopted as standards across IFS • Ensure identity and access are enablers, not bottlenecks • Build the authorisation APIs and SDKs that product teams consume • Own the operation of the authorisation engine: SpiceDB on PostgreSQL • Define IAM patterns, standards, and golden paths for product teams to implement securely • Provide subject-matter expertise on identity and access security

🎯 Requirements

• Hands-on experience designing production AI applications • Architecting and engineering fine-grained authorisation systems at production scale • Hands-on production experience with a relationship-based / policy-based authorisation engine, ideally SpiceDB or comparable Zanzibar-inspired systems • Deep, practical knowledge of authorisation models: relationship-based access control, role-based, and attribute-based • Experience designing authorisation schemas and permission models • Familiarity with policy-as-code approaches and tooling • Understanding of running the authorisation engine in production • Hands-on production experience with Curity and/or Keycloak • Deep knowledge of OAuth 2.0, OpenID Connect, SAML 2.0 • Experience with enterprise identity federation, SSO, and directory integration • Strong hands-on engineering capability across the NGA stack • Comfortable operating in a cloud-native environment • Secure coding practices and security-by-design principles

🏖️ Benefits

• Flexible work arrangements • Professional development opportunities