Senior Authorization Architect – Cloud IAM & Policy Engines

Wolters Kluwer N.V.; City Of London; Presencial; GBP 150 000 - 190 000; Tempo integral

Resumo da oferta

Wolters Kluwer N.V. seeks a seasoned security and identity architect to design and implement a cloud-agnostic Identity and Authorization Platform for a multi-tenant SaaS environment.

You will drive RBAC, ReBAC, ABAC, ACL, and policy engines across web, mobile, APIs, microservices, and AI gateway components. The role emphasizes authorization architecture over traditional IAM, with collaboration across API Gateway, Kubernetes, service mesh, and mTLS.

Qualificações

• 10+ years of engineering experience.
• 5+ years security platform experience.
• Demonstrable experience building authorization engines using RBAC, ReBAC, ABAC, ACL.
• Experience designing authorization for multi-tenant SaaS, microservices, APIs.
• Experience with OAuth2, OpenID Connect, JWT, SAML.
• Strong distributed systems experience.

Responsabilidades

• Lead architecture and implementation of Authentication, Authorization, Identity federation, and fine-grained access control.
• Own architecture for RBAC, ReBAC, ABAC, ACL, policy engines, and relationship graphs.
• Design authorization for web apps, mobile, APIs, microservices, AI Gateway, agent runtime, MCP tools.
• Lead adoption of OpenFGA/SpiceDB, Cedar, Open Policy Agent (OPA), Zanzibar concepts.
• Collaborate with platform teams on API Gateway, AI Gateway, Kubernetes, service mesh, mTLS.

Conhecimentos

RBAC

ReBAC

ABAC

ACL

OAuth2

OpenID Connect

JWT

SAML

Ferramentas

OpenFGA

SpiceDB

OPA

Cedar

Envoy

Istio

SPIFFE/SPIRE

Google Zanzibar

Descrição da oferta de emprego

Wolters Kluwer N.V. seeks a seasoned security and identity architect to design and implement a cloud-agnostic Identity and Authorization Platform for a multi-tenant SaaS environment.

You will drive RBAC, ReBAC, ABAC, ACL, and policy engines across web, mobile, APIs, microservices, and AI gateway components. The role emphasizes authorization architecture over traditional IAM, with collaboration across API Gateway, Kubernetes, service mesh, and mTLS.