Security Engineer (IAM)
In-Office
Posted 10d ago
Remote Work Policy
On-site
Categories
Applied AI Engineer
About the job
As an Identity and Access Management (IAM) Security Engineer at Cloudflare, you will be instrumental in designing, implementing, and scaling robust IAM solutions for both internal employees and workloads. Your primary focus will be on securing systems, applications, and data by ensuring secure user access, authentication, and authorization processes. This role involves leveraging Cloudflare's own products to enhance identity security and contributing to the overall mission of building a better and more secure Internet.
Responsibilities
- Design, build, test, and deploy IAM solutions covering authentication, authorization, and accounting.
- Utilize Cloudflare products to secure identities.
- Develop SSO integrations using SAML, OIDC, OAuth, and SCIM.
- Build and manage the Identity Governance and Administration platform.
- Develop automated roles using RBAC and ABAC.
- Build and manage an access certification platform.
- Build and manage a Privileged Access Management (PAM) platform.
- Provide operational support for IAM systems, including participation in an on-call rotation.
Requirements
- 5-10 years of experience in identity federation (SAML, OAuth, OpenID Connect, etc.).
- Experience implementing Identity Governance and Administration (IGA) solutions, including lifecycle management, SCIM, birthright access (RBAC, ABAC), and access certifications.
- Demonstrated ability to build production-grade automation scripts and tools.
- Hands-on engineering experience leveraging AI/LLMs to solve operational or technical challenges.
- Experience with secure configuration of containerized application platforms (e.g., Kubernetes).
- Advanced scripting experience (Python, TypeScript, Bash, etc.).
- Experience implementing Zero Trust controls.
- Experience integrating with applications and SaaS solutions.
- Experience with Identity and Access Management policy application and enforcement.
- Experience working with Identity Threat Detection & Response (ITDR).
- Experience working with infrastructure as code and configuration management tools like Terraform, Ansible, etc.