Senior/Principal Security Engineer: Cloud Platform

ORI; City of London; On-site; GBP 60,000 - 80,000; Full time

Job summary

An AI Infrastructure provider in the City of London seeks a Software Engineer to lead the development of critical systems. You'll work on the IAM platform and ensure secure access control in a fully remote work environment. Ideal candidates will have experience in Golang, OAuth2, and microservices. This role offers flexible hours and extensive benefits, including 30 days of annual leave and health insurance.

Benefits

Remote work, flexible hours

30 days of annual leave

Private medical insurance

Cycle to Work Scheme

Gympass subscription

Participation in company shares program

Enhanced parental pay

Qualifications

• Proven expertise in Golang and cloud-native backend development.
• Deep knowledge of OAuth2, OIDC, SAML, JWT.
• Understanding of cryptography fundamentals.
• Experience implementing RBAC and Zero-Trust principles.
• Experience designing scalable, low-latency microservices.

Responsibilities

• Develop and architect Ori's IAM platform.
• Design secure identity federation between cloud services.
• Maintain authentication and authorization services.
• Identify and resolve security issues within your domain.

Skills

Golang

OAuth2

OIDC

SAML

Postgresql

Microservices

Tools

Kubernetes

Auth0

Keycloak

Job description

Company Overview

Ori is setting a new standard for how AI worlds are built. We are the first AI Infrastructure provider with the native expertise, comprehensive capabilities, and end-to-end flexibility to support any model, team, or scale. As a fast-growing startup backed by leading investors, we value ambition, accessibility, and collaboration, and are committed to pushing the boundaries of what’s possible in the field of AI. Join our close-knit, global team and help us build the future of AI infrastructure!

Job Description

As a Software Engineer at Ori, you’ll be a hands‑on technical leader, driving the design and development of our most critical systems, including our GPU orchestration layer, inference‑serving infrastructure, and core platform APIs.

You’ll set the standard for engineering excellence across the team, working closely with other principal engineers to align on strategy and drive technical leadership. You’ll partner with peers in infrastructure and machine learning to deliver high‑performance AI systems, and mentor engineers across multiple squads. While you won’t have direct reports, you’ll play a pivotal role in shaping engineering direction, design decisions, and cross‑team collaboration.

What You’ll Do

• Develop and architect Ori's proprietary Identity and Access Management (IAM) platform, building core components that enable secure access control across the Ori AI cloud
• Design and implement secure identity federation between cloud services, customer tenants, and external identity providers (Azure AD, Okta, Google Workspace, etc.) that will power the Ori AI cloud
• Build scalable IAM services and features, including user management, role‑based access control, policy enforcement, and audit logging
• Develop and maintain authentication and authorization services, including OAuth2, OIDC, SAML, and custom token‑based solutions
• Contribute to engineering design efforts across the backend domain - architecture reviews, and system evolution strategies
• Collaborate closely with platform and infrastructure to deliver reliable, secure, production‑grade services
• Maintain high standards for code quality, observability, and maintainability through reviews and best practices
• Identify and resolve security issues, performance bottlenecks, or reliability challenges within your domain

What You Bring

• Proven expertise in Golang and cloud‑native backend development
• Deep knowledge of OAuth2, OIDC, SAML, JWT
• Understanding of cryptography fundamentals (TLS, PKI, key rotation, secrets management)
• Experience implementing RBAC and Zero‑Trust principles
• Experience with Postgresql or other databases
• Experience designing scalable, low‑latency microservices for authentication and authorization
• A bias for action, accountability, and leading by example

Preferred Skills (Nice to Have)

• Experience with Kubernetes and cloud‑native services
• Experience with Auth0 and/or Keycloak
• Familiarity with confidential computing and zero‑trust networking
• Knowledge of compliance frameworks like SOC2, HIPAA, FedRAMP, or GDPR.

Qualities we look for

• Set the standard: Every single day, you spot opportunities to constructively shake things up.
• Inspire the change: There's no blueprint for the future. You’ll embrace challenges and change.
• You’re real and you’re true to yourself: We cherish and celebrate diversity so you’ll feel right at home whoever you are and whoever you’re talking to, you treat everyone the same.

Why should you join us?

What sets us apart is our blend of modern technology, competitive benefits, and an open, welcoming work culture that enables our people to thrive.

Here are just some of the great things you can expect from us:

• Remote work, flexible hours: we offer a fully remote work schedule, with flexible working hours and trust in your productivity, we are in sync with your team’s general locations and time zones to foster effective and seamless collaboration.
• 30 days of annual leave: we value your peace of mind. With 30 days off (excluding public holidays) and access to mental health resources, we make sure you're as strong mentally as you are professionally.
• A culture that emphasises results over hierarchy, process & ego: we place great emphasis on the quality, ingenuity and creativity of work.
• Open communication, regular feedback: we value smooth collaboration, direct and actionable feedback, and believe that leading with empathy and a growth mindset makes us better together.
• Learning Time: we all have dedicated learning time to focus on new skills, projects or interests that lay outside of your day‑to‑day job.
• Health & Wellbeing: we want everyone to feel healthy and happy, so we offer private medical insurance via Bupa.
• Cycle to Work Scheme: we're committed to building a sustainable business, so we encourage cycling to work.
• Gympass subscription to a variety of gyms and wellbeing apps
• Participation in the company shares program
• Enhanced parental pay & leave

Diversity, Equity, Inclusion and Belonging

We are an equal opportunity employer and we strive to reduce unconscious bias throughout our hiring process. All applicants will be considered for employment without attention to ethnicity, religion, sexual orientation, gender identity, family or parental status, national origin, veteran, neurodiversity status or disability status. To ensure our recruitment processes provide an equal opportunity for all applicants to succeed, we encourage you to let us know if there are any adjustments that we can make.