At IFS, we’re building the next generation of AI-native enterprise software. We’re looking for a Principal Platform Engineer to build the shared authentication and authorisation capabilities that our product engineering teams depend on.
You should be a hands-on platform engineer who builds through code and automates by default. Your experience might centre on infrastructure as code, deployment pipelines, automation, platform tooling or service integrations. What matters is that you have built reliable, repeatable capabilities that engineering teams use to deliver and operate software.
Your background may be in platform engineering, infrastructure, SRE, identity engineering or systems integration. What matters is substantial hands-on experience building or extending platform capabilities through code and automation, supporting the delivery and operation of software.
A software development background is particularly valuable, but it is not a prerequisite. We welcome engineers whose coding experience has developed through platform engineering, infrastructure or SRE work.
Architecture, administration and product configuration alone are not sufficient. We want to understand what you personally implemented, tested, automated and supported in production.
We’re interested in what you have personally built and automated: how you provisioned it, tested changes, delivered it safely and enabled other teams to use it without depending on manual intervention. Identity and access is the domain you will work in; specialist experience in that domain is particularly welcome.
This is an opportunity to shape a critical platform capability, with substantial technical ownership and impact across our engineering organisation.
The job
We are hiring two Principal Platform Engineers to help unify authentication and authorisation across our next-generation enterprise software platform.
We are consolidating a fragmented authorisation landscape into one model across three hosting environments: our cloud-native platform, our legacy hosting platform and our lifecycle cloud. It must be correct, fast and reliable in distributed, multi-tenant environments.
Our current stack includes SpiceDB backed by PostgreSQL for authorisation, and Curity for authentication, with Keycloak estates migrating onto it. These describe the systems you will work on; prior experience with every product is not required.
You will design and build platform services, APIs and automation, own them in production, and establish patterns that product engineering teams can adopt confidently. A central part of the role is making secure authentication and authorisation available through documented, automated, self-service workflows.
This is a hands-on role. You will write and review infrastructure and automation code, build platform integrations, and contribute to tooling and services, including those written in Go.
What we need to see
Platform engineering and automation
Authorisation
Authentication
Production ownership
How we work
You will remain close to the code while helping other engineers make good architectural decisions. We value clear technical reasoning, constructive challenge and ownership from design through production.
We are interested in how AI-assisted engineering fits into your work: what you delegate, how you review and test the results, and how you remain accountable for the software you ship.
Must have — platform engineering
Experience developing application or backend services is a strong advantage, but is not required. Your coding experience may come primarily from infrastructure and platform engineering. You should be willing to work with our Go-based tooling and services and develop your capabilities where needed.
Must have — authentication and authorisation foundations
We would particularly like to talk to you if…
These are advantages, not substitutes for strong platform engineering, coding and automation skills. Strong platform engineers with relevant authentication and authorisation foundations are encouraged to apply even if they have not used our specific products.
We embrace flexibility and hybrid work opportunities to support diverse needs and lifestyles, while also valuing inclusive workplace experiences. By fostering a sense of community, we drive innovation, strengthen connections, and nurture belonging. Our commitment ensures you can work in a way that suits you best, while also engaging with colleagues to share ideas and build meaningful relationships.
Job details are sourced from the employer's original posting.
Open job postingAbout the company
About IGT1 IGT1 is a rapidly growing offshore technology and talent solutions company based in Port City Colombo. We are a fully owned subsidiary of IGT I Holdings Sweden AB, funded by the three of world’s leading private equity firms; EQT Group, Hg, and TA Associates. We’re also proud to be a sister company of IFS, Sri Lanka’s largest and most established technology company.  At IGT1, we partner with global businesses to provide them with an operation that maximizes efficiency, spurs growth, allows them to develop and deliver world-class product and services, and create long-term value. Our people-first culture champions diversity, teamwork, and continuous learning, creating an environment where talent thrives.  With a team of over 500 professionals and counting, we are always looking for passionate, skilled individuals who want to make a global impact while being part of something extraordinary.  Through our offshore collaboration model, you'll be embedded within the team of one of our esteemed international clients, contributing directly to high-impact, enterprise-level initiatives.  About the client: Sitecore  Sitecore delivers a composable digital experience platform that empowers the world’s smartest and largest brands to build lifelong relationships with their customers. A highly decorated industry leader, Sitecore is the leading company bringing together content, commerce, and data into one connected platform that delivers millions of digital experiences every day. Thousands of blue-chip companies including American Express, Porsche, Starbucks, L’Oréal, and Volvo Cars rely on Sitecore to provide more engaging, personalized experiences for their customers.