Principal Platform Engineer (Agentic AI)

Location: Staines-upon-Thames, England, United Kingdom; hybrid work opportunities are available.

Company

hirify.global develops AI-native enterprise software on a cloud-based platform for asset, operations, and critical service management.

What you will do

• Architect and engineer a unified, enterprise-scale authorisation platform across Nexus, F1, and LEC using SpiceDB.
• Design fine-grained ReBAC, RBAC, and ABAC models, including schemas, relationships, permission checks, and policy-as-code integrations.
• Operate SpiceDB on PostgreSQL, including migration to cloud-native PostgreSQL and blue-green deployments.
• Build authorisation APIs and SDKs and integrate identity and access services with the Internal Developer Platform.
• Architect and operate enterprise authentication infrastructure using Curity and/or Keycloak, including OAuth 2.0, OIDC, SAML, token lifecycle management, and claims-based authorisation.
• Define IAM standards and golden paths, advise product and security teams, and maintain platform reliability, performance, and security.

Requirements

• Production-scale experience architecting fine-grained authorisation systems in distributed, multi-tenant environments.
• Hands-on experience with SpiceDB or comparable Zanzibar-inspired systems such as OpenFGA or Ory Keto.
• Strong knowledge of ReBAC, RBAC, ABAC, policy-as-code, authorisation correctness, latency, consistency, observability, and traceability.
• Production experience with Curity and/or Keycloak, OAuth 2.0, OIDC, SAML 2.0, JWT, opaque tokens, token introspection, SSO, LDAP, and Active Directory.
• Engineering experience with Go, Apache Kafka or RedPanda, PostgreSQL, Kubernetes, containers, GitOps, and Infrastructure as Code.
• Experience with event-driven and distributed systems architecture and secure coding practices.

Culture & Benefits

• Hybrid work opportunities designed to support flexibility and inclusive workplace experiences.
• Collaboration across platform, product, architecture, and security teams.
• Work in a global, diverse enterprise software environment focused on innovation and sustainability.