Principal Platform Identity Engineer

AI FactoryOS Operations

Role Summary

Key Responsibilities

• Design and operate workforce and service identity platforms with SSO and identity provider integration.
• Design and operate internal certificate authority, certificate lifecycle management and secrets platforms.
• Automate identity, certificate and secrets provisioning through CI/CD and infrastructure-as-code workflows.
• Own privileged access management with just-in-time elevation, approval workflows and recorded break-glass access.
• Enforce least-privilege patterns and report on whether access conforms to the policy model.
• Design resilient certificate and secret rotation.
• Operate cryptographic key custody under dual control with named custodians, recorded quorum operations and delegated authority.
• Harden identity, certificate and secrets services and produce compliance evidence for audits and customer due diligence.
• Provide senior technical escalation, review complex access requests and mentor engineers.

Required Skills

• Deep IAM platform experience including SSO and identity provider integration.
• Strong certificate lifecycle management and internal PKI experience.
• Strong secrets management experience including rotation, access policy and audit.
• Practical privileged access management, just-in-time elevation and break-glass design experience.
• Hardware security module and cryptographic key-custody experience using dual-control or quorum models.
• Zero-trust architecture knowledge for multi-tenant platforms.
• Experience integrating identity and secrets into CI/CD and infrastructure-as-code workflows.
• Strong Python, Go or Bash capability for automation and tooling.
• Senior escalation experience in a 24/7 production environment.
• Understanding of ISO 27001 or SOC 2 evidence, separation of duties and independent privileged-access approval.

Preferred Experience

• Kubernetes-native identity patterns such as workload identity or SPIFFE/SPIRE.
• Multi-tenant service provider, cloud or colocation experience.
• Familiarity with GPU or HPC infrastructure identity and access requirements.
• Relevant security or identity certification, such as CISSP or a vendor credential.
• Bachelor's degree in computer science, engineering or related discipline, or equivalent experience and training.

Expected Outcomes

Location and On-Call

• Based in Australia or Singapore, with travel to Australian AI Factory sites as required.
• The role shares the after-hours escalation roster with other senior engineers.
• First-line monitoring and first response are handled by the operations centre.