Cloud IAM Architect: Fine-Grained Authorization

Wolters Kluwer; Greater London; On-site; GBP 120,000 - 160,000; Full time

Job summary

Wolters Kluwer is seeking a senior architect to lead the design and engineering of a cloud-agnostic Identity and Authorization Platform. You will focus on authorization architecture for users, services, APIs, AI agents, and data across a multi-tenant SaaS platform, with emphasis on scalable policy engines and cross-cutting security controls.

The role requires deep experience in RBAC, ReBAC, ABAC, OAuth2, OpenID Connect, JWT, and SAML, plus practical use of SpiceDB, OpenFGA, Cedar, and OPA.

Qualifications

• 10+ years software engineering experience
• 5+ years in security/platform engineering
• Demonstrable experience building authorization engines

Responsibilities

• Lead architecture and implementation of authentication, authorization and identity federation
• Design fine-grained access control models (RBAC, ReBAC, ABAC, ACL)
• Develop policy engines and decision architectures (PEP→PDP→Policy Store→Decision)
• Collaborate with API Gateway, AI Gateway, Kubernetes, and service mesh teams

Skills

Identity & Access Management

Authorization Architecture

RBAC / ReBAC / ABAC

OAuth2 / OpenID Connect

JWT / SAML

Policy Engines

Multi-tenant SaaS

Distributed Systems

Kubernetes / Istio

OpenFGA / SpiceDB / OPA

Tools

SpiceDB

OpenFGA

OPA

Cedar

Zanzibar

Policy Store

Job description

Wolters Kluwer is seeking a senior architect to lead the design and engineering of a cloud-agnostic Identity and Authorization Platform. You will focus on authorization architecture for users, services, APIs, AI agents, and data across a multi-tenant SaaS platform, with emphasis on scalable policy engines and cross-cutting security controls.

The role requires deep experience in RBAC, ReBAC, ABAC, OAuth2, OpenID Connect, JWT, and SAML, plus practical use of SpiceDB, OpenFGA, Cedar, and OPA.