Senior Systems Engineer, Identity & Access Management - Cloudflare

About the Role

Cloudflare is looking for a hands-on Senior Systems Engineer to join our Identity & Access Management (IAM) team. You will own the authentication and authorization systems that serve as the identity layer for our global Control Plane. This includes managing login, SSO, OAuth, API tokens, account membership, roles, permissions, and SCIM provisioning.

Responsibilities

• Feature Development: Design and build high-throughput, low-latency IAM capabilities for customer-facing and internal APIs.
• System Evolution: Evolve authentication and authorization systems into modern, distributed, and edge-capable architectures.
• API & System Design: Translate product and security requirements into robust technical specifications and well-structured APIs.
• Engineering Excellence: Maintain high standards through code reviews, technical documentation, and collaborative problem-solving.
• Operational Stewardship: Ensure platform reliability, observability, and resilience under constant production load.
• AI-Assisted Development: Utilize AI tools throughout the development lifecycle, from code generation to debugging.

Desirable Skills & Experience

• Professional Experience: 5-8 years building and operating production systems at scale.
• Identity Domain Knowledge: Proficiency in OAuth 2.0, OIDC, SAML, SCIM, RBAC/ABAC, and session management. Experience with policy engines (e.g., Cedar).
• Language Proficiency: Strong skills in Go and TypeScript.
• API Design: Experience building REST APIs, including routing, authentication, and versioning.
• Database & Storage: PostgreSQL and Redis expertise (schema design, query optimization, and consistency tradeoffs).
• Distributed Systems: Strong intuition for consistency models, event-driven replication, and global state propagation.

Bonus Points

• Experience with token lifecycle systems (issuance, rotation, revocation).
• Familiarity with the Cloudflare developer platform (Workers, Durable Objects, KV, R2).
• Experience re-architecting large, long-lived codebases under production traffic.
• Proficiency with Docker, Kubernetes, Terraform, and observability tools (Prometheus, Grafana, Kibana).