Note: The job is a remote job and is open to candidates in USA. Cloudflare is a technology company that operates a global network to help build a better Internet by protecting and accelerating Internet applications. The IAM Security Engineer will design, implement, and scale identity and access management solutions for internal users and workloads, including SSO, identity governance, role-based access, access certification, and privileged access management. The role also provides operational support for IAM systems and participates in an on-call rotation.
Responsibilities
- Design, build, test, and deploy IAM solutions across authentication, authorization, and accounting
- Leverage Cloudflare products to secure our identities
- Build SSO integrations leveraging SAML, OIDC, OAuth, and SCIM
- Build and manage the Identity Governance and Administration platform
- Develop automated roles leveraging RBAC and ABAC
- Build and manage an access certification platform
- Build and manage a Privileged Access Management (PAM) platform
- Provide operational support of IAM systems including an on-call rotation that may include after hours calls
Skills
- 5 -10 years experience of identity federation (SAML, OAuth, OpenID Connect, etc.)
- Experience implementing Identity Governance and Administration (IGA) solutions including lifecycle management, SCIM, birthright access (RBAC, ABAC), and access certifications
- Demonstrated ability to build production-grade automation scripts and tools. Must possess hands-on engineering experience leveraging AI/LLMs to solve operational or technical challenges
- Experience with secure configuration of containerized application platforms (e.g. Kubernetes)
- Advanced scripting experience (Python, TypeScript, Bash, etc.)
- Experience implementing Zero Trust controls
- Experience integrating with applications and SaaS solutions
- Experience with Identity and Access Management policy application and enforcement
- Experience working with Identity Threat Detection & Response (ITDR)
- Experience working with infrastructure as code and configuration management tools like Terraform, Ansible, etc
Company Overview