Senior IAM Platform Engineer - SpiceDB & AuthN/AuthZ

IFS; Staines-upon-Thames; On-site; GBP 120,000 - 180,000; Full time

Job summary

IFS is hiring a Principal Platform Engineer for Identity & Access Management. You will architect and operate enterprise‑scale identity and access solutions across multiple platforms, ensuring secure and frictionless access for developers and end users.

You will lead on SpiceDB‑based authorization, integrate Curity and Keycloak, and implement OAuth 2.0, OIDC, and SAML patterns, shaping IAM standards across the org.

Qualifications

• Architecting and engineering fine‑grained authorisation at production scale.
• Hands‑on production experience with SpiceDB or similar Zanzibar‑inspired systems.
• Deep knowledge of ReBAC, RBAC, and ABAC and when to apply them.
• Experience with OAuth 2.0, OIDC, SAML and token-based auth patterns.

Responsibilities

• Design and engineer unified authorisation across Nexus, F1, and LEC.
• Own and operate the authorisation engine on PostgreSQL with cloud deployment.
• Build IAM APIs and SDKs for product teams to consume securely.
• Define and promote golden IAM patterns for internal platforms.

Skills

Architecting authZ at scale

Hands-on SpiceDB experience

RBAC / ABAC / ReBAC knowledge

OAuth 2.0 / OIDC / SAML knowledge

AuthN/AuthZ integration

Kubernetes / cloud native

Tools

SpiceDB

Curity

Keycloak

OpenID Connect

OPA / Rego / Cedar

Job description

IFS is hiring a Principal Platform Engineer for Identity & Access Management. You will architect and operate enterprise‑scale identity and access solutions across multiple platforms, ensuring secure and frictionless access for developers and end users.

You will lead on SpiceDB‑based authorization, integrate Curity and Keycloak, and implement OAuth 2.0, OIDC, and SAML patterns, shaping IAM standards across the org.