Principal Forward Deployed Engineer

Responsibilities

Our client, a leading identity and access management organization, is seeking a Principal Forward Deployed Engineer to lead their most strategic technical deployments in the AI agent identity space. In this role, you will:

• Own the reference architecture. Define canonical agent identity, delegation, audit, and kill-switch patterns that the broader engineering team deploys across the portfolio, keeping them current as standards and products evolve.
• Lead the hardest accounts. Personally own the most strategic, regulated, or technically novel deployments where no playbook exists yet.
• Raise the technical bar. Review architectures from other engineers, coach senior customer engineers and your team, and set the standard for excellence in the field.
• Shape the roadmap. Synthesize patterns across multiple accounts into clear technical direction, working directly with product and engineering leadership to prioritize features.
• Represent technical authority. Brief CISO, CIO, and Chief AI Officer audiences, contribute to industry standards and frameworks shaping agent identity, and serve as an external technical voice.
• Resolve complex challenges. Step into the most difficult technical and organizational situations across accounts and find viable paths forward.
• Set standards for evaluation and observability. Define how the team measures authorization latency, scope sprawl, delegation anomalies, audit completeness, and kill-switch verification at scale.
• Build team leverage. Transform recurring field work into reusable modules, internal tooling, and enablement resources that accelerate the entire engineering function.

What We're Looking For

• Engineering depth. 10+ years shipping production software with deep distributed systems and identity experience, plus a track record of staying hands-on while setting technical direction.
• Authority-level identity protocols. Expert knowledge of OAuth 2.0, OIDC, SAML, SCIM, RFC 8693 token exchange, act claims, CIMD and DCR, and DPoP. Contribution to standards or open source is a strong plus.
• Deep agent security fluency. Working knowledge of OWASP Top 10 for Agentic Applications, NIST AI RMF, MITRE ATLAS, MCP, A2A, ISO/IEC 42001, and the EU AI Act, with judgment to apply them in HIPAA, FedRAMP, and SOC 2 environments.
• Expert fine-grained authorization. Deep experience with ReBAC and ABAC using policy engines such as OPA, Cedar, OpenFGA, or equivalent, with command of design tradeoffs at scale.
• Proven AI hands-on experience. Production integrations across major agent platforms and MCP, with daily AI-native development practice.
• Force multiplier capabilities. Demonstrated record of setting technical direction across multiple teams or accounts and mentoring senior engineers.
• Customer-facing authority. Credible from the IDE to the boardroom, trusted by CISOs and principal engineers alike, with composure when account dynamics become challenging.
• High agency, founder's mindset. Applied to building a function, not just managing individual accounts.
• Ability to travel up to 35% as needed.

How We Work with You

When you apply through Get A Job.ai, our talent team will conduct an initial screening to understand your background and ensure alignment with this principal-level role. We then present qualified candidates to our client for consideration. Throughout the process, we coordinate interviews and provide guidance. Please do not contact the client directly—all communication should flow through our recruiting team to ensure a professional and organized experience for everyone involved.

Pay

This position is based in London. Compensation details will be discussed during the screening process with our recruiting team.

Equal Opportunity

Get A Job.ai is committed to equal employment opportunity. We consider all qualified applicants without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability, or veteran status.