2 days ago
Düsseldorf, GermanyStaff+
Responsibilities
- Design, build, and operate shared authentication and authorization platform services, APIs, integrations, and automation.
- Unify authorization across cloud-native, legacy hosting, and lifecycle cloud environments in distributed, multi-tenant systems.
- Develop infrastructure and automation code, Go-based tooling and services, reusable platform capabilities, and self-service workflows.
- Automate provisioning, configuration, deployment, upgrades, recovery, and operational tasks through version-controlled repeatable workflows.
- Operate containerized application services on Kubernetes and own production reliability, including observability, performance testing, safe rollouts, rollback, backup, and recovery.
- Establish authentication and authorization patterns that product engineering teams can adopt through documented, automated workflows.
- Provide technical leadership through architecture decisions, code reviews, engineering standards, and support for other engineers.
- Diagnose production failures and prevent recurrence through code and automation.
Requirements
- Substantial hands-on experience building and operating platforms or shared infrastructure for software engineering teams.
- Strong coding and scripting skills applied to infrastructure, automation, deployment tooling, integrations, or platform services, with comfort maintaining code, reviewing changes, and using automated tests.
- Experience automating provisioning, configuration, deployment, and operational tasks through version-controlled, repeatable workflows.
- Production experience with Kubernetes and containers in an environment delivering and operating software applications.
- Practical experience with a major public cloud platform, Infrastructure as Code, CI/CD, and GitOps.
- Experience building reusable platform capabilities or self-service workflows that reduce manual work for engineering teams.
- Sound understanding of APIs, networking, data stores, and distributed-system behavior, with the ability to troubleshoot production issues.
- Evidence of technical leadership through design decisions, code reviews, engineering standards, and support for other engineers.
- Practical experience implementing authentication and access control in software applications, APIs, or shared platform services.
- Working knowledge of OAuth 2.0, OpenID Connect, token-based authentication, secure validation, common failure modes, permission models, least privilege, and tenant isolation.
- Ability to translate security requirements into working software, automated tests, and maintainable platform capabilities.
- Experience with Curity, Keycloak, SpiceDB or comparable authorization engines, enterprise federation, SAML, policy-as-code, Go, PostgreSQL, Kafka, or Redpanda is preferred.
- Willingness to work with Go-based tooling and services and develop capabilities where needed.
- Demonstrable hands-on experience designing, building, and shipping production AI applications is stated as required in the posting.
Benefits
- Flexible and hybrid work opportunities are available, with flexibility to work in a way that supports individual needs while engaging with colleagues.
- The role offers technical ownership and broad impact across the engineering organization.
- Employees join a global, diverse environment with a commitment to sustainability, collaboration, and inclusive workplace experiences.
About IFS
IFS builds IFS Cloud, an enterprise suite covering ERP, EAM, FSM, SCM, and project/service management for manufacturers and asset‑intensive organizations. Its business model centers on software subscriptions and services for cloud and hybrid deployments, plus industry-specific modules and consulting. Founded in 1983 and headquartered in Linköping, Sweden, the company is privately held under EQT ownership and operates globally across industrial and service-focused markets.