IAM Security Engineer

IAM Security Engineer Overview

At Cloudflare, we are dedicated to creating a better Internet. As part of our mission, we operate one of the largest networks globally, serving a diverse range of clients from individual bloggers to Fortune 500 companies. Our services enhance the performance and security of Internet applications without the need for additional hardware or software installations.

The Identity and Access Management (IAM) team plays a vital role in managing user identities, access privileges, and authentication mechanisms across our systems. We are committed to protecting sensitive information and ensuring seamless user experiences while adhering to best practices and compliance standards.

As an IAM Security Engineer, you will be instrumental in designing, implementing, and scaling IAM solutions for our internal workforce and workloads. Your responsibilities will include:

• Designing, building, testing, and deploying IAM solutions focused on authentication, authorization, and accounting.
• Leveraging Cloudflare products to secure identities.
• Building SSO integrations using SAML, OIDC, OAuth, and SCIM.
• Managing the Identity Governance and Administration platform.
• Developing automated roles through RBAC and ABAC.
• Establishing an access certification platform.
• Building and managing a Privileged Access Management platform.
• Providing operational support for IAM systems, including on-call duties.

To be successful in this role, you should have:

• 5 to 10 years of experience with identity federation technologies.
• Experience in implementing IGA solutions, including lifecycle management and access certifications.
• Ability to create production-grade automation scripts and tools.
• Hands-on experience with AI and LLMs for solving operational challenges.
• Familiarity with secure configuration of containerized platforms like Kubernetes.
• Advanced scripting skills in Python, TypeScript, or Bash.
• Experience with Zero Trust controls and integration with applications and SaaS solutions.
• Knowledge of IAM policy application and enforcement.
• Experience with ITDR and infrastructure as code tools like Terraform and Ansible.

Cloudflare is not just a technology company; we are committed to protecting the free and open Internet. We have initiatives like Project Galileo, which supports journalism and civil society organizations, and the Athenian Project, which ensures local governments have reliable access to election information.

If you are passionate about building a better Internet and meet the qualifications outlined above, we encourage you to apply. Please note that applicants may be required to attend an in-person interview at one of our offices during the hiring process.

Degree Requirement: Bachelor’s

Visa Sponsorship May be