Principal Platform Engineer || Agentic AI || Identity and Access Management

Job summary

As a Principal Platform Engineer in Identity and Access Management at IFS, you will be the technical authority on authorization and authentication across the Kairos and Nexus platforms. This hands-on role involves architecting and engineering enterprise-scale identity and access solutions while collaborating with various teams to ensure seamless integration and security.

Qualifications

• production experience with relationship-based authorisation engine
• practical knowledge of authorisation models
• experience designing authorisation schemas and permission models
• familiarity with policy-as-code approaches
• understanding of running the authorisation engine in production
• production experience with Curity and/or Keycloak
• practical knowledge of OAuth 2.0, OpenID Connect, SAML 2.0
• experience with enterprise identity federation and directory integration

Responsibilities

• architect and engineer the unified authorisation platform
• design and implement fine-grained authorisation models
• model authorisation schemas and permission checks
• own the operation of the authorisation engine
• build authorisation APIs and SDKs
• architect and engineer enterprise-scale AuthN solutions
• implement and enforce OAuth 2.0, OpenID Connect, and SAML patterns
• define IAM patterns and standards
• integrate identity and access services with the Internal Developer Platform
• provide expertise on identity and access security
• maintain identity and access service reliability

Skills

Relocation