Security Engineer (IAM) - Cloudflare

About the Role

As an Identity and Access Management (IAM) Security Engineer, you will play a crucial role in designing, implementing, and scaling identity and access management solutions for Cloudflare’s internal workforce and workloads. You will be responsible for safeguarding our systems, applications, and data by ensuring secure user access, authentication, and authorization mechanisms.

What You’ll Do

• Design, build, test, and deploy IAM solutions across authentication, authorization, and accounting.
• Leverage Cloudflare products to secure our identities.
• Build SSO integrations leveraging SAML, OIDC, OAuth, and SCIM.
• Build and manage the Identity Governance and Administration (IGA) platform.
• Develop automated roles leveraging RBAC and ABAC.
• Build and manage an access certification platform.
• Build and manage a Privileged Access Management (PAM) platform.
• Provide operational support of IAM systems, including an on-call rotation that may include after-hours calls.

Desirable Skills & Experience

• 5–10 years of experience in identity federation (SAML, OAuth, OpenID Connect, etc.).
• Experience implementing IGA solutions, including lifecycle management, SCIM, birthright access (RBAC, ABAC), and access certifications.
• Demonstrated ability to build production-grade automation scripts and tools. Must possess hands-on engineering experience leveraging AI/LLMs to solve operational or technical challenges.
• Experience with secure configuration of containerized application platforms (e.g., Kubernetes).
• Advanced scripting experience (Python, TypeScript, Bash, etc.).
• Experience implementing Zero Trust controls.
• Experience integrating with applications and SaaS solutions.
• Experience with IAM policy application and enforcement.
• Experience working with Identity Threat Detection & Response (ITDR).
• Experience working with infrastructure as code and configuration management tools like Terraform and Ansible.

About Cloudflare

Cloudflare is on a mission to help build a better Internet. We power millions of websites and Internet properties, protecting and accelerating them without adding hardware or changing code. We value builders who spot "normalized" problems and use AI-native curiosity to create solutions.