Principal Platform Engineer

At IFS, we’re building the next generation of AI-native enterprise software. We’re looking for a Principal Platform Engineer to build the shared authentication and authorisation capabilities that our product engineering teams depend on. You should be a hands-on platform engineer who builds through code and automates by default. Your experience might centre on infrastructure as code, deployment pipelines, automation, platform tooling or service integrations. What matters is that you have built reliable, repeatable capabilities that engineering teams use to deliver and operate software. Your background may be in platform engineering, infrastructure, SRE, identity engineering or systems integration. What matters is substantial hands-on experience building or extending platform capabilities through code and automation, supporting the delivery and operation of software. A software development background is particularly valuable, but it is not a prerequisite. We welcome engineers whose coding experience has developed through platform engineering, infrastructure or SRE work. Architecture, administration and product configuration alone are not sufficient. We want to understand what you personally implemented, tested, automated and supported in production. We’re interested in what you have personally built and automated: how you provisioned it, tested changes, delivered it safely and enabled other teams to use it without depending on manual intervention. Identity and access is the domain you will work in; specialist experience in that domain is particularly welcome. This is an opportunity to shape a critical platform capability, with substantial technical ownership and impact across our engineering organisation. The job We are hiring two Principal Platform Engineers to help unify authentication and authorisation across our next-generation enterprise software platform. We are consolidating a fragmented authorisation landscape into one model across three hosting environments: our cloud-native platform, our legacy hosting platform and our lifecycle cloud. It must be correct, fast and reliable in distributed, multi-tenant environments. Our current stack includes SpiceDB backed by PostgreSQL for authorisation, and Curity for authentication, with Keycloak estates migrating onto it. These describe the systems you will work on; prior experience with every product is not required. You will design and build platform services, APIs and automation, own them in production, and establish patterns that product engineering teams can adopt confidently. A central part of the role is making secure authentication and authorisation available through documented, automated, self-service workflows. This is a hands-on role. You will write and review infrastructure and automation code, build platform integrations, and contribute to tooling and services, including those written in Go. What we need to see Platform engineering and automation

• Software platforms or shared services you have built and operated for application engineering teams.
• Infrastructure code, automation, delivery pipelines, integrations or platform tooling you have personally built and maintained.
• Automation covering provisioning, configuration, deployment, upgrades and recovery, managed through version control and repeatable delivery pipelines.
• Self-service capabilities that reduce manual intervention and enable developers to work independently.
• Experience deploying and operating containerised application services on Kubernetes in a software delivery environment., You will remain close to the code while helping other engineers make good architectural decisions. We value clear technical reasoning, constructive challenge and ownership from design through production. We are interested in how AI-assisted engineering fits into your work: what you delegate, how you review and test the results, and how you remain accountable for the software you ship. Inscribirse en esta oferta

• Practical understanding of access control within applications and APIs, including role-based, attribute-based and relationship-based models.
• Experience implementing permission checks or designing permission models, with an understanding of tenant isolation and security boundaries.
• The ability to reason about correctness, latency, consistency and the traceability of authorisation decisions.

• Familiarity with fine-grained authorisation engines or policy-as-code approaches is valuable. Authentication

• Practical understanding of authentication for software applications and services, including OAuth 2.0, OpenID Connect and token lifecycle management.
• Experience implementing or extending authentication flows in software, with an understanding of validation, trust boundaries and failure modes.
• Understanding of enterprise federation, SSO and external identity-provider integration in a customer-facing platform.

• Deeper experience engineering and operating authentication infrastructure at scale is particularly welcome. Production ownership

• Experience with cloud infrastructure, Kubernetes, containers, GitOps and Infrastructure as Code.
• An approach to reliability that includes observability, performance testing, safe rollouts, rollback, backup and recovery.
• Examples of diagnosing production failures and using code or automation to prevent recurrence.
• Sound engineering judgement across distributed systems, relational data and event-driven services.

Ebury Madrid Senior Platform Engineer EUR 65000-80000 per year Green Eagle Solutions Madrid, Community of Madrid, 28008 Volver a la última búsqueda Trabajos ) Comunidad de Madrid ) Madrid ) Trabajos en ingeniería ) Principal Platform Engineer || Identity Platform (AuthN/AuthZ) ( volver a la última búsqueda Recibir ofertas similares por correo electrónico No gracias, llévame a la oferta de empleo Al crear una alerta, aceptas nuestros Términos y condiciones y Política de privacidad, y el uso de cookies. Inscribirse en esta oferta

Profesiones

• Técnico
• Recepciónista
• Administrador
• Ventas
• Enfermero