IAM Security Engineer

• The Identity and Access Management (IAM) team is dedicated to ensuring the secure and efficient management of user identities, access privileges, and authentication mechanisms across internal systems, applications, and data
• Our mission is to safeguard the organization against unauthorized access, protect sensitive information, and enable seamless user experiences while adhering to industry best practices and compliance standards
• As an Identity and Access Management (IAM) Security Engineer, you will play a crucial role in designing, implementing, and scaling identity and access management solutions for Cloudflare’s internal workforce and workloads
• You will be responsible for safeguarding our systems, applications, and data by ensuring secure user access, authentication, and authorization mechanisms
• Design, build, test, and deploy IAM solutions across authentication, authorization, and accounting
• Leverage Cloudflare products to secure our identities
• Build SSO integrations leveraging SAML, OIDC, OAuth, and SCIM
• Build and manage the Identity Governance and Administration platform
• Develop automated roles leveraging RBAC and ABAC
• Build and manage an access certification platform
• Build and manage a Privileged Access Management (PAM) platform
• Provide operational support of IAM systems including an on-call rotation that may include after hours calls

Benefits

• Competitive pay: We offer a competitive total rewards package, where every employee is an owner of our stock.
• Take-what-you-need vacation: We encourage employees to find a comfortable work-life balance by taking as many days off as they need while still being able to perform their jobs satisfactorily. (We really mean it!)
• Paid maternity & paternity leave: Our global parental leave policy allows up to sixteen paid weeks of bonding leave time for all qualifying new parents.
• Employee benefits: We offer a comprehensive benefits package including healthcare, life insurance, short- and long-term disability, pension plans in accordance with the market practice in our locations.
• Commuter program: We are flexible about where we work and value connecting at the office. Our commuter benefits program is in place to support team members’ commute to work via public transportation without the extra cost burden.
• Wellbeing: Global offerings that provide mental health, childcare and family forming support to our employees across our offices.- Experience working with infrastructure as code and configuration management tools like Terraform, Ansible, etc
• Experience with secure configuration of containerized application platforms (e.g. Kubernetes)
• Demonstrated ability to build production-grade automation scripts and tools. Must possess hands-on engineering experience leveraging AI/LLMs to solve operational or technical challenges
• Experience implementing Identity Governance and Administration (IGA) solutions including lifecycle management, SCIM, birthright access (RBAC, ABAC), and access certifications
• Experience with Identity and Access Management policy application and enforcement
• Experience working with Identity Threat Detection & Response (ITDR)
• Advanced scripting experience (Python, TypeScript, Bash, etc.)
• Strong understanding of identity federation (SAML, OAuth, OpenID Connect, etc.)
• Experience integrating with applications and SaaS solutions
• Security engineers take part in a wide variety of tasks and projects in the team. One individual is not expected to know everything, but a working knowledge in several of the following areas is required:
• Experience implementing Zero Trust controls- Please note that applicants who progress to the offer stage of the interview process may be asked to attend an in-person interview within one of the Cloudflare Offices or Cloudflare Hubs