# IAM Security Engineer

**Company**: Cloudflare
**Location**: Bengaluru
**Work arrangement**: onsite
**Experience**: senior
**Job type**: full-time
**Category**: Engineering
**Industry**: Technology

**Apply**: https://job-boards.greenhouse.io/cloudflare/jobs/8124227?utm_source=yubhub.co&utm_medium=jobs_feed&utm_campaign=apply
**Canonical**: https://yubhub.co/jobs/job_8ab88ae3-f61

## Description

At Cloudflare, we're on a mission to help build a better Internet. The Identity and Access Management (IAM) team is dedicated to ensuring the secure and efficient management of user identities, access privileges, and authentication mechanisms across internal systems, applications, and data.

As an Identity and Access Management (IAM) Security Engineer, you will play a crucial role in designing, implementing, and scaling identity and access management solutions for Cloudflare's internal workforce and workloads. You will be responsible for safeguarding our systems, applications, and data by ensuring secure user access, authentication, and authorization mechanisms.

Responsibilities:

- Design, build, test, and deploy IAM solutions across authentication, authorization, and accounting

- Leverage Cloudflare products to secure our identities

- Build SSO integrations leveraging SAML, OIDC, OAuth, and SCIM

- Build and manage the Identity Governance and Administration platform

- Develop automated roles leveraging RBAC and ABAC

- Build and manage an access certification platform

- Build and manage a Privileged Access Management (PAM) platform

- Provide operational support of IAM systems including an on-call rotation that may include after hours calls

Desirable skills, knowledge and experience:

- 5-10 years experience of identity federation (SAML, OAuth, OpenID Connect, etc.)

- Experience implementing Identity Governance and Administration (IGA) solutions including lifecycle management, SCIM, birthright access (RBAC, ABAC), and access certifications

- Demonstrated ability to build production-grade automation scripts and tools. Must possess hands-on engineering experience leveraging AI/LLMs to solve operational or technical challenges.

- Experience with secure configuration of containerized application platforms (e.g. Kubernetes)

- Advanced scripting experience (Python, TypeScript, Bash, etc.)

- Experience implementing Zero Trust controls

- Experience integrating with applications and SaaS solutions

- Experience with Identity and Access Management policy application and enforcement

- Experience working with Identity Threat Detection & Response (ITDR)

- Experience working with infrastructure as code and configuration management tools like Terraform, Ansible, etc.

## Skills

### Required
- Identity and Access Management
- Authentication
- Authorization
- Cloudflare products
- SAML
- OIDC
- OAuth
- SCIM
- RBAC
- ABAC
- Python
- TypeScript
- Bash
- Kubernetes
- Terraform
- Ansible

### Nice to have
- AI/LLMs
- Zero Trust controls
- Identity Threat Detection & Response (ITDR)
- Infrastructure as code

---

Source: [Apply at job-boards.greenhouse.io](https://job-boards.greenhouse.io/cloudflare/jobs/8124227?utm_source=yubhub.co&utm_medium=jobs_feed&utm_campaign=apply)