Principal Engineer, Identity and Access Management

London Source: WhatJobs

See advert for pay

Overview

In this role you will lead the design and implementation of a cloud-agnostic Identity and Authorization Platform for a multi-tenant SaaS. You will own the authorization architecture across web, mobile, APIs, microservices, and AI gateways, partnering with platform teams to scale secure access. You will drive adoption of modern policy engines and authorization models to enable fine-grained, scalable access control. You will shape security strategy by aligning with the company’s core mission of protecting users, services, and data. This is a hands-on leadership role with a strong impact on platform security and developer experience.

Responsibilities

Lead architecture and implementation of authentication, authorization, identity federation, and fine-grained access control
Own architecture for RBAC, ReBAC, ABAC, ACL, policy engines, and relationship graphs
Design authorization for web, mobile, APIs, microservices, AI Gateway, agent runtime, MCP tools, knowledge graph, vector stores
Design authorization decision architecture (PEP, PDP, Policy Store, Relationship Store, Decision)
Lead adoption of OpenFGA/SpiceDB, Cedar, Open Policy Agent (OPA), Zanzibar concepts
Collaborate with platform teams on API Gateway, AI Gateway, Kubernetes, Service Mesh, and mTLS

Key requirements

10+ years of engineering experience
5+ years in security platform experience
Proven experience building authorization engines (RBAC, ReBAC, ABAC, ACL)
Experience designing authorization for multi-tenant SaaS, microservices, and APIs
Experience with OAuth2, OpenID Connect, JWT, SAML
Strong distributed systems background