3 months ago
Responsibilities
- Design and implement authentication and authorization systems, including identity provider integrations, token management, session handling, and SSO flows.
- Architect and build fine-grained RBAC and ABAC models for multi-tenant environments.
- Own the permissions layer from policy definition and enforcement through auditing and compliance reporting.
- Build and maintain distributed tracing, structured logging, metrics collection, and alerting infrastructure.
- Define and enforce security standards for APIs and services, including schema governance, data segregation, and least-privilege access.
- Design identity and access patterns for AI agents, including MCP authentication, agent impersonation, and system accounts.
- Contribute to multi-service architecture and consistently integrate authentication and authorization across human and agentic workflows.
- Drive CI/CD, automated testing, observability, and infrastructure-as-code practices.
- Build and maintain deployment pipelines supporting zero-downtime and multi-service deployments across customer environments.
- Author and review Technical Decision Records and participate in technology reviews.
- Mentor junior and mid-level engineers, facilitate technical discussions, and build consensus around architectural decisions.
Requirements
- Strong software engineering foundations in algorithms, data structures, system design, and maintainable, testable code.
- Strong command of Golang and Python.
- Hands-on experience building or integrating identity and access management systems and understanding OAuth 2.0, OIDC, SAML, and token-based authentication flows.
- Experience with cloud provider IAM systems such as AWS IAM, GCP IAM, and Azure AD.
- Production experience implementing RBAC, ABAC, or policy-as-code frameworks in multi-tenant systems.
- Experience designing and operating metrics, tracing, and logging pipelines using tools such as OpenTelemetry, Prometheus, Grafana, or Jaeger.
- Strong working knowledge of Kubernetes and ArgoCD in production clusters.
- Experience designing multi-service systems with schema governance, forward compatibility, and secure data access patterns.
- Understanding of agent identity and permissions, including MCP authentication, impersonation, system accounts, and scoped token delegation.
- Familiarity with threat modeling, secure coding, security testing, and compliance workflows.
- Hands-on experience building and optimizing CI/CD pipelines, including multi-service and zero-downtime deployments.
- Excellent communication and collaboration skills across research, product, and engineering stakeholders.
- Exposure to Rust or C++ is desirable.
- Experience with Kubernetes CRDs, Operators, Crossplane, and Helm charts is desirable.
- Understanding of software operating in cloud, on-premises, and air-gapped environments is desirable.
- Experience with fuzzing, deterministic simulation testing, or fault injection is desirable.
Benefits
- Hybrid work model with time in the Shoreditch office and work-from-home days.
- Equity options.
- 10% employer pension contribution.
- Free office lunches.
- Enhanced parental leave, including 3 months full-pay paternity leave and 6 months full-pay maternity leave.
- YellowNest nursery scheme.
- 25 days of annual leave plus public holidays.
- Private medical insurance with 100% employee cover.
- Wellhub subscription.
- Eye tests.
- Personal development support.
- Employee Assistance Programme.
- Bike2Work scheme.
- Season ticket loan.
- Octopus EV salary sacrifice scheme.
About PhysicsX
PhysicsX is a physical AI company on a mission to accelerate innovation and overhaul what engineering and manufacturing look like today. We are building a new software stack to deliver deep AI enablement across the entire engineering lifecycle. PhysicsX partners with leading organizations in aerospace & defense, automotive, semiconductors, materials, and energy, supporting them on some of their most critical and complex challenges. PhysicsX is headquartered in the United Kingdom, with offices in London and New York. We are currently recruiting for multiple positions, however, please only apply for the role that best aligns with your skillset and career goals.