Lead Platform Engineer — Authorization & Identity (Go)

IFS; Staines-upon-Thames; On-site; GBP 110,000 - 140,000; Full time

Job summary

IFS is building the next generation of AI-native enterprise software. Two Principal Platform Engineers will join to unblock authorisation across cloud-native and legacy environments, using SpiceDB, Curity, and Keycloak, with production-grade Go code.

You will own identity patterns, design ReBAC/RBAC/ABAC models, and implement policy-as-code. This is a hands-on role with strong focus on reliability and scale.

Qualifications

• Fine-grained authorisation systems at production scale
• Experience with Zanzibar-style authorisation engines (SpiceDB/OpenFGA/Ory Keto)
• Design of ReBAC/RBAC/ABAC permission models
• Policy-as-code exposure (OPA/Rego/Cedar)
• Production auth on PostgreSQL with observability
• Production Curity and/or Keycloak configurations and operations
• Go, PostgreSQL, Kafka/RedPanda, GitOps, IaC
• You still write code in a hands-on role

Responsibilities

• Architect and operate fine-grained authorisation systems at scale
• Run SpiceDB/OpenFGA/Ory Keto in production with observability
• Design authorization schemas and ensure correctness, latency, and consistency
• Implement policy-as-code using OPA/Rego/Cedar
• Support authentication layers with Curity and/or Keycloak in production
• Develop on the NGA stack and related data/services

Skills

Distributed systems

Go programming

On-call experience

Tools

SpiceDB

OpenFGA

Ory Keto

Curity

Keycloak

OAuth 2.0 / OIDC / SAML 2.0

PostgreSQL

Kubernetes / AKS

Kafka / RedPanda

GitOps / IaC

Job description

IFS is building the next generation of AI-native enterprise software. Two Principal Platform Engineers will join to unblock authorisation across cloud-native and legacy environments, using SpiceDB, Curity, and Keycloak, with production-grade Go code.

You will own identity patterns, design ReBAC/RBAC/ABAC models, and implement policy-as-code. This is a hands-on role with strong focus on reliability and scale.