Principal IAM Architect: Policy Engines & Microservices
Tagetik Software S.r.l.
Stand out for this role — generate a tailored resume and cover letter in about a minute.
Job summary
Tagetik Software S.r.l. is seeking a senior security platform architect to lead the design and implementation of a comprehensive authorization framework across web, mobile, APIs and microservices.
You will drive the choice and integration of policy engines, IAM standards and multi-tenant security for scalable SaaS delivery. You will collaborate with platform teams on API and AI gateways, service mesh, and Kubernetes, ensuring robust RBAC, ReBAC, ABAC and ACL models with OAuth2/OpenID
Qualifications
- 10+ years engineering in security/platform.
- 5+ years security platform experience.
- Experience building authorization engines using RBAC, ReBAC, ABAC, ACL.
- Experience designing authorization for multi-tenant SaaS, microservices, APIs.
- Experience with OAuth2, OpenID Connect, JWT, SAML.
- Strong distributed systems experience.
Responsibilities
- Lead architecture and implementation of web applications, mobile, APIs, microservices, AI gateway, agent runtime, MCP tools, Knowledge Graph, and vector stores.
- Design authorization decision architecture: PEP, PDP, Policy Store, and Relationship Store.
- Lead adoption of OpenFGA/SpiceDB, Cedar, OPA, Zanzibar concepts.
- Work with platform teams on API Gateway, AI Gateway, Kubernetes, and service mesh.
- Ensure secure, scalable, multi-tenant distributed systems using OAuth2/OpenID Connect/JWT/SAML.
Skills
Tools
Job description
Tagetik Software S.r.l. is seeking a senior security platform architect to lead the design and implementation of a comprehensive authorization framework across web, mobile, APIs and microservices.
You will drive the choice and integration of policy engines, IAM standards and multi-tenant security for scalable SaaS delivery. You will collaborate with platform teams on API and AI gateways, service mesh, and Kubernetes, ensuring robust RBAC, ReBAC, ABAC and ACL models with OAuth2/OpenID
'/%3e%3cpath%20d='M101.744%2012.4726L102.894%2016.1947L99.0021%2013.2201L101.744%2012.4726ZM105.3%208.40937H100.488L99.0026%203.59473L97.5116%208.41047L92.7%208.40385L96.5965%2011.3834L95.1055%2016.1942L99.0021%2013.2196L101.408%2011.3834L105.3%208.40992V8.40937Z'%20fill='white'/%3e%3cdefs%3e%3clinearGradient%20id='paint0_linear_5593_1381'%20x1='90'%20y1='9.44471'%20x2='99'%20y2='9.44471'%20gradientUnits='userSpaceOnUse'%3e%3cstop%20stop-color='%2300AD70'/%3e%3cstop%20offset='0.998594'%20stop-color='%2300B67A'/%3e%3cstop%20offset='1'%20stop-color='%23DCDCE6'/%3e%3c/linearGradient%3e%3c/defs%3e%3c/svg%3e){kind=small}
