2 days ago
Dublin, IrelandStaff+
Responsibilities
- Build and operate shared authentication and authorization platform services for product engineering teams.
- Unify authorization across cloud-native, legacy hosting, and lifecycle cloud environments.
- Write and review infrastructure, automation, integration, platform-service, and Go-based tooling code.
- Automate provisioning, configuration, deployment, upgrades, recovery, rollbacks, backups, and operational workflows.
- Create documented, automated, self-service identity capabilities that reduce manual intervention for developers.
- Deploy and operate containerized application services on Kubernetes in production software-delivery environments.
- Implement authentication flows, permission checks, access-control models, tenant isolation, and identity-provider integrations.
- Own platform capabilities in production, including observability, performance testing, reliability, troubleshooting, and prevention of recurring failures.
- Provide technical leadership through architecture decisions, code reviews, engineering standards, and support for other engineers.
Requirements
- Substantial hands-on experience building and operating platforms or shared infrastructure for software engineering teams.
- Strong coding and scripting skills applied to infrastructure, automation, deployment tooling, or integrations, with comfort maintaining code, reviewing changes, and using automated tests.
- Experience automating provisioning, configuration, deployment, and operational tasks through version-controlled, repeatable workflows.
- Production experience with Kubernetes and containers in environments delivering and operating software applications.
- Practical experience with a major public cloud platform, Infrastructure as Code, CI/CD, and GitOps.
- Experience building reusable platform capabilities or self-service workflows that reduce manual engineering effort.
- Sound understanding of APIs, networking, data stores, and distributed-system behavior, with the ability to troubleshoot production issues.
- Practical experience implementing authentication and access control in software applications, APIs, or shared platform services.
- Working knowledge of OAuth 2.0, OpenID Connect, token-based authentication, secure validation, permission models, least privilege, tenant isolation, and access-decision enforcement.
- Ability to translate security requirements into working software, automated tests, and maintainable platform capabilities.
- Technical leadership experience through design decisions, code reviews, engineering standards, and support for other engineers.
- Willingness to work with Go-based tooling and services and develop further Go capabilities as needed.
- Preferred experience includes Curity, Keycloak, SpiceDB or comparable relationship-based authorization engines, enterprise federation, SAML, policy-as-code, distributed multi-tenant identity systems, self-service identity APIs or SDKs, Go, PostgreSQL, Kafka, and RedPanda.
- Demonstrable hands-on experience designing, building, and shipping production AI applications is required by the posting.
Benefits
- Flexible and hybrid work opportunities are available.
- The role provides substantial technical ownership and impact across the engineering organization.
- The position offers the opportunity to work on enterprise-scale cloud-native and AI engineering products in a global, diverse environment.
Tech Stack
About IFS
IFS builds IFS Cloud, an enterprise suite covering ERP, EAM, FSM, SCM, and project/service management for manufacturers and asset‑intensive organizations. Its business model centers on software subscriptions and services for cloud and hybrid deployments, plus industry-specific modules and consulting. Founded in 1983 and headquartered in Linköping, Sweden, the company is privately held under EQT ownership and operates globally across industrial and service-focused markets.