Senior Identity Platform Engineer - Production AuthN/AuthZ

IFS; Staines-upon-Thames; Hybrid; GBP 120,000 - 160,000; Full time

Benefits offered by this job

Hybrid work opportunities

Job summary

IFS is seeking a Principal Platform Engineer for Identity Platform (AuthN/AuthZ). This hands-on role focuses on building and operating identity infrastructure, not governance.

You will architect a unified authorisation model across multiple hosting environments, implementing scalable, multi-tenant solutions with SpiceDB and Curity/Keycloak in production. You will write Go and shape patterns across engineering teams.

Qualifications

• Fine-grained authorisation systems built and run at production scale
• Hands-on production experience with Zanzibar-style authorisation engines (SpiceDB/OpenFGA/Ory Keto)
• Authorisation schemas and permission models designed for correctness, latency and consistency
• Policy-as-code exposure: OPA/Rego or Cedar
• Running authorisation in production on PostgreSQL with observability

Responsibilities

• Architect and build the authorisation layer across multi-tenant environments
• Own production of the identity platform components
• Write Go code and contribute hands-on engineering
• Operate Curity and Keycloak deployments including upgrades and extensions
• Collaborate with teams to define correct identity patterns

Skills

Fine-grained authorisation

On-call production

Go programming

Production-grade identity systems

Architecture design

Tools

SpiceDB

OpenFGA

Ory Keto

Curity

Keycloak

PostgreSQL

Go

Kubernetes

AKS

OPA/Rego

Cedar

Job description

IFS is seeking a Principal Platform Engineer for Identity Platform (AuthN/AuthZ). This hands-on role focuses on building and operating identity infrastructure, not governance.

You will architect a unified authorisation model across multiple hosting environments, implementing scalable, multi-tenant solutions with SpiceDB and Curity/Keycloak in production. You will write Go and shape patterns across engineering teams.