Principal Platform Engineer at IFS1

Department: Research and DevelopmentSeniority in posting: senior

Language

Setup: Hybrid
Location: Krakow, Lesser Poland Voivodeship
Type: Full-time
Level: staff+
Posted: Sep 18, 2026

Description

IFS is hiring two Principal Platform Engineers to unify authentication and authorisation across its cloud-native platform, legacy hosting platform, and lifecycle cloud. The role involves designing and building platform services, APIs, automation, and integrations; owning them in production; establishing self-service workflows; and contributing to Go-based tooling. Candidates need substantial hands-on platform engineering, coding, automation, Kubernetes, cloud, CI/CD, GitOps, and authentication and authorisation experience, with production ownership and technical leadership. The role offers hybrid work opportunities.

Required Skills

Platform engineering
Automation
Kubernetes
OAuth 2.0
OpenID Connect
Go
SpiceDB
Curity
Keycloak
GitOps

Additional Information

Required Previous Experiences: Substantial hands-on experience building and operating platforms or shared infrastructure for software engineering teams
Experience automating provisioning, configuration, deployment, and operational tasks through version-controlled, repeatable workflows
Production experience with Kubernetes and containers in a software delivery environment
Experience with a major public cloud platform, Infrastructure as Code, CI/CD, and GitOps
Experience building reusable platform capabilities or self-service workflows for engineering teams
Experience implementing authentication and access control in software applications, APIs, or shared platform services
Experience deploying and operating containerised application services on Kubernetes in a software delivery environment
Preferred Qualifications: Experience developing application or backend services
Production experience with Curity
Experience engineering and operating Keycloak in a software product environment
Experience building fine-grained authorisation with SpiceDB or a comparable engine
Experience with enterprise federation, SAML, policy-as-code, or authentication and authorisation in distributed, multi-tenant systems
Experience building self-service identity capabilities, APIs, or SDKs
Experience with Go, PostgreSQL, Kafka, or RedPanda in production