Remote Principal Platform Engineer || Agentic AI || Identity and Access Management

Description:

• Serve as the technical authority on authorization (AuthZ) and authentication (AuthN) across Kairos and Nexus platforms.
• Architect, engineer, and operate enterprise-scale identity and access solutions to secure the IFS platform.
• Focus on unifying authorization across IFS hosting environments, addressing complex, high-stakes challenges.
• Design and implement IAM patterns adopted as standards across IFS, collaborating with platform, product, and security teams.

Requirements:

• Must have experience architecting and engineering fine-grained authorization systems in distributed, multi-tenant environments.
• Hands-on production experience with relationship-based authorization engines, ideally SpiceDB or similar.
• Deep knowledge of authorization models (ReBAC, RBAC, ABAC) and experience designing authorization schemas.
• Must have experience architecting enterprise-scale AuthN solutions, with hands-on experience in Curity and/or Keycloak.
• Familiarity with OAuth 2.0, OpenID Connect, SAML, and token-based authentication patterns.
• Strong engineering skills in Go, PostgreSQL, and cloud-native environments (Kubernetes, GitOps).

Benefits:

• Flexible and hybrid work opportunities to support diverse needs and lifestyles.
• Inclusive workplace experiences fostering community, innovation, and meaningful relationships.