IAM Security Engineer

Cloudflare•San Francisco, CA

15h

About The Position

As an Identity and Access Management (IAM) Security Engineer, you will play a crucial role in designing, implementing, and scaling identity and access management solutions for Cloudflare’s internal workforce and workloads. You will be responsible for safeguarding our systems, applications, and data by ensuring secure user access, authentication, and authorization mechanisms.

Requirements

8+ years of experience in understanding of identity federation (SAML, OAuth, OpenID Connect, etc.)
Experience implementing Identity Governance and Administration (IGA) solutions including lifecycle management, SCIM, birthright access (RBAC, ABAC), and access certifications
Experience with secure configuration of containerized application platforms (e.g. Kubernetes)
Advanced scripting experience (Python, TypeScript, Bash, etc.)
Experience implementing Zero Trust controls
Experience integrating with applications and SaaS solutions
Experience with Identity and Access Management policy application and enforcement
Experience working with Identity Threat Detection & Response (ITDR)
Experience working with infrastructure as code and configuration management tools like Terraform, Ansible, etc.

Responsibilities

Design, build, test, and deploy IAM solutions across authentication, authorization, and accounting
Leverage Cloudflare products to secure our identities
Build SSO integrations leveraging SAML, OIDC, OAuth, and SCIM
Build and manage the Identity Governance and Administration platform
Develop automated roles leveraging RBAC and ABAC
Build and manage an access certification platform
Build and manage a Privileged Access Management (PAM) platform
Provide operational support of IAM systems including an on-call rotation that may include after hours calls

Stand Out From the Crowd

Upload your resume and get instant feedback on how well it matches this job.

Upload and Match Resume