2 days ago
Staines-upon-Thames, United KingdomStaff+
Responsibilities
- Design and build shared authentication and authorization platform services, APIs, integrations, and automation across multiple hosting environments.
- Write, review, test, and maintain infrastructure, automation, tooling, and Go-based services.
- Automate provisioning, configuration, deployment, upgrades, rollback, backup, recovery, and operational workflows through version-controlled repeatable pipelines.
- Operate Kubernetes-based containerized application services and own platform capabilities in production.
- Create documented self-service identity and authorization workflows that reduce manual intervention for product engineering teams.
- Implement and support permission models, tenant isolation, authentication flows, token lifecycle management, federation, SSO, and external identity-provider integrations.
- Diagnose production failures and improve reliability through observability, performance testing, safe rollouts, and automation.
- Provide technical leadership through architecture and design decisions, code reviews, engineering standards, and support for other engineers.
Requirements
- Substantial hands-on experience building and operating platforms or shared infrastructure for software engineering teams.
- Strong coding and scripting skills applied to infrastructure, automation, deployment tooling, or integrations, with experience maintaining code, reviewing changes, and using automated tests.
- Experience automating provisioning, configuration, deployment, and operational tasks through version-controlled repeatable workflows.
- Production experience with Kubernetes and containers in an environment delivering and operating software applications.
- Practical experience with a major public cloud platform, Infrastructure as Code, CI/CD, and GitOps.
- Experience building reusable platform capabilities or self-service workflows that reduce manual engineering work.
- Sound understanding of APIs, networking, data stores, and distributed-system behavior, with the ability to troubleshoot production issues.
- Practical experience implementing authentication and access control in software applications, APIs, or shared platform services.
- Working knowledge of OAuth 2.0, OpenID Connect, token-based authentication, secure validation, permission models, least privilege, and tenant isolation.
- Ability to translate security requirements into working software, automated tests, and maintainable platform capabilities.
- Evidence of technical leadership through design decisions, code reviews, engineering standards, and support for other engineers.
- Experience with Curity, Keycloak, SpiceDB or comparable authorization engines, enterprise federation, SAML, policy-as-code, Go, PostgreSQL, Kafka, or RedPanda is preferred but not required.
- Candidates should have demonstrable hands-on experience designing, building, and shipping production AI applications; experience limited to AI-assisted development tools is insufficient.
Benefits
- Flexible hybrid work opportunities and flexibility to support diverse needs and lifestyles.
- Inclusive workplace experiences and opportunities to collaborate with colleagues in a global environment.
Tech Stack
About IFS
IFS builds IFS Cloud, an enterprise suite covering ERP, EAM, FSM, SCM, and project/service management for manufacturers and asset‑intensive organizations. Its business model centers on software subscriptions and services for cloud and hybrid deployments, plus industry-specific modules and consulting. Founded in 1983 and headquartered in Linköping, Sweden, the company is privately held under EQT ownership and operates globally across industrial and service-focused markets.