Principal Identity Platform Engineer: Production-Scale Authorization

IFS; Staines-upon-Thames; Hybrid; GBP 90,000 - 140,000; Full time

Job summary

IFS is building AI-native enterprise software for global asset management and operations. This hands-on role focuses on authorisation infrastructure, requiring Go development in production-grade systems.

You will design and operate a Zanzibar-style authorization engine, work with SpiceDB/OpenFGA/Ory Keto, and run it on PostgreSQL within AKS/Kubernetes, with observability and on-call responsibility.

Qualifications

• Architect and run fine-grained authorisation at production scale.
• Hands-on with Zanzibar-style engines (SpiceDB/OpenFGA/Ory Keto).
• Knowledge of ReBAC/RBAC/ABAC and policy-as-code basics.
• Operational experience on PostgreSQL with observability.

Responsibilities

• Architect and build the authorisation system in production.
• Write Go and own the code in production environments.
• Operate Curity/Keycloak and integrate with the platform.
• Ensure correctness, latency, and multi-tenant reliability.

Skills

Go programming

Distributed systems

On-call production

Tools

SpiceDB

OpenFGA

Ory Keto

PostgreSQL

Kubernetes

Curity

Keycloak

Job description

IFS is building AI-native enterprise software for global asset management and operations. This hands-on role focuses on authorisation infrastructure, requiring Go development in production-grade systems.

You will design and operate a Zanzibar-style authorization engine, work with SpiceDB/OpenFGA/Ory Keto, and run it on PostgreSQL within AKS/Kubernetes, with observability and on-call responsibility.