Lead the design and engineering of a cloud-agnostic Identity and Authorization Platform that secures users, services, APIs, AI agents, and data across a multi-tenant SaaS platform.Unlike traditional IAM roles, this position focuses heavily on authorization architecture.ResponsibilitiesLead architecture and implementation of:AuthenticationAuthorizationIdentity federationFine-grained access controlOwn architecture for:RBACReBACABACACLPolicy enginesRelationship graphsDesign authorization for:Web applicationsMobileAPIsMicroservicesAI GatewayAgent runtimeMCP toolsKnowledge GraphVector storesDesign authorization decision architecture:PEP PDP Policy Store Relationship StoreDecisionLead adoption of:OpenFGA / SpiceDBCedarOpen Policy Agent (OPA)Zanzibar conceptsWork with platform teams on:API GatewayAI GatewayKubernetesService MeshmTLSEssential experience10+ years engineering5+ years security platform experienceDemonstrable experience building authorization engines using:RBACReBACABACACLExperience designing authorization for:Multi-tenant SaaSMicroservicesAPIsExperience with:OAuth2OpenID ConnectJWTSAMLStrong distributed systems experienceNice to haveGoogle ZanzibarOpenFGASpiceDBOPACedarEnvoyIstioSPIFFE/SPIREOur Interview PracticesTo maintain a fair and genuine hiring process, we kindly ask that all candidates participate in interviews without the assistance of AI tools or external prompts.
In order to make an application, simply read through the following job description and make sure to attach relevant documents.
Our interview process is designed to assess your individual skills, experiences, and communication style.
We value authenticity and want to ensure we’re getting to know you—not a digital assistant.
To help maintain this integrity, we ask to remove virtual backgrounds and include in-person interviews in our hiring process.
Please note that use of AI-generated responses or third-party support during interviews will be grounds for disqualification from the recruitment process. xbpsjku Applicants may be required to appear onsite at a Wolters Kluwer office as part of the recruitment process.SummaryLocation: GBR
- London, Canada SquareType: Full time
Principal Engineer, Identity and Access Management in Kennington employer: Wolters Kluwer
Wolters Kluwer is an exceptional employer that fosters a dynamic and collaborative work culture, empowering employees to drive innovation in the IT GRC sector. With a strong focus on professional development, you will have access to extensive training and growth opportunities while working alongside industry leaders in a supportive environment. Located in the UK, our team enjoys a flexible work-life balance and the chance to make a meaningful impact in both enterprise and public sector markets.
