Principal Platform Engineer - Authentication - IFS - Remote - Global

The Platform Engineering team (R&D) builds and operates the foundational infrastructure that powers IFS Cloud. We're organised into platform teams – each led by a technical lead who sets direction and leads a squad of engineers. The Identity & Access Management domain sits at the heart of IFS's platform. Every IFS product — IFS Cloud, Nexus / IFS.ai, Remote — depends on secure, reliable authentication. We're looking for a Domain Owner for Authentication: a hands-on technical leader who combines deep identity-management expertise with a platform-engineering, automation-first mindset. This is a Principal-level Architect / Team Lead role. You'll own the Authentication subdomain end-to-end: strategy, architecture, delivery, and team health. You'll partner with the Authorization Domain Owner, your domain's Program Manager, and engineering leadership to drive the IFS-wide consolidation of identity providers — with Curity positioned as the single identity platform replacing Entra ID, Keycloak, and others across IFS. We care about the quality of your experience, not just the years. A senior engineer with four years of deep, deliberate work on modern identity platforms is more interesting than someone with fifteen years of incidental exposure. You'll own architecture & delivery, platform engineering mindset, technical leadership, strategy & roadmapping, and more. Responsibilities include designing and evolving IFS's authentication stack, driving multi-year consolidation, resolving technical debt, defining authentication patterns, treating identity infrastructure as a product, partnering with DevOps and SRE, leading and mentoring squads, owning the authentication roadmap, evaluating emerging technologies, and contributing to platform strategy. Must-have experience includes deep knowledge of OAuth 2.0, OpenID Connect, SAML, JWT, PKCE, federated identity, hands-on work with identity platforms like Curity, Keycloak, or similar, production cloud experience (Azure preferred), strong software engineering foundations (Java, Go), designing for multi-tenant SaaS, and leadership experience. Nice-to-have skills include experience with platform engineering, observability tooling, compliance environments, event-driven architectures, and open-source contributions. The role emphasizes automation-first, pragmatic, collaborative work, clear communication, and team growth. Why this role? It offers genuine platform ownership, strategic leverage, a strong team, and modern tech stack serving hundreds of customers. Additional info highlights flexibility, hybrid work, diversity, community, and innovation.