IAM Security Engineer

Cloudflare, Inc

Confirmed live yesterday High trust
Hybrid

Quick summary

Work type
Hybrid
Location
Austin, TX
Posted
7 days ago
Freshness
Confirmed live yesterday

Market check

Salary context

How this pay compares to similar roles

Similar $179k
$118k most similar roles pay here $227k

This listing doesn't post a salary. Most similar roles pay $148,500–$208,800.

Based on 240 similar postings.

Employer

About Cloudflare, Inc

Cloudflare is a prominent cloud services and security company that provides content delivery network (CDN), DDoS mitigation, and Zero Trust security services to millions of internet properties.

Cloudflare, Inc currently has 199 open roles on FindRole.

Listed pay typically runs $223,000–$288,000 across 63 roles with salary data.

Most-posted roles

View all roles at Cloudflare, Inc

At a glance

TL;DR · IAM Security Engineer

The IAM Security Engineer joins the Identity and Access Management team to design, build, test, and deploy solutions for internal workforce and workloads. This role focuses on safeguarding systems and data by managing authentication, authorization, and accounting mechanisms. Key responsibilities include building SSO integrations using SAML, OIDC, OAuth, and SCIM; developing automated roles via RBAC and ABAC; and managing platforms for Identity Governance and Administration, access certification, and Privileged Access Management. The candidate will utilize Python, TypeScript, Bash, Terraform, and Ansible to create production-grade automation tools while leveraging AI and LLMs to solve technical challenges. Required expertise includes identity federation, Zero Trust controls, containerized application platforms like Kubernetes, and Identity Threat Detection and Response. This role addresses the critical business problem of securing internal infrastructure against unauthorized access through robust identity policy enforcement.

What you'll do

  • Design, build, test, and deploy IAM solutions across authentication, authorization, and accounting systems.
  • Build SSO integrations using SAML, OIDC, OAuth, and SCIM protocols.
  • Manage the Identity Governance and Administration platform including lifecycle management and access certifications.
  • Develop automated roles utilizing RBAC and ABAC frameworks.
  • Build and manage a Privileged Access Management (PAM) platform.
  • Create production-grade automation scripts and tools using Python, TypeScript, or Bash.
  • Leverage AI and LLMs to solve complex operational and technical challenges.
  • Provide operational support for IAM systems including participation in an on-call rotation.

What we're looking for

  • Strong understanding of identity federation including SAML, OAuth, and OpenID Connect.
  • Experience implementing Identity Governance and Administration (IGA) solutions including lifecycle management, SCIM, RBAC, and ABAC.
  • Ability to build production-grade automation scripts and tools using AI/LLMs to solve technical challenges.
  • Advanced scripting experience in languages such as Python, TypeScript, or Bash.
  • Experience with infrastructure as code and configuration management tools like Terraform or Ansible (preferred).
  • Experience with secure configuration of containerized application platforms like Kubernetes (preferred).
  • Experience with Zero Trust controls, Identity Threat Detection & Response, or IAM policy enforcement (preferred).
  • Export control laws, including the U.S. Export Administration Regulations.

More like this

Similar roles

Security Engineer (IAM)

Cloudflare, Inc

Bengaluru, India 36 days ago
SAML OIDC OAuth SCIM RBAC ABAC Python TypeScript Bash Kubernetes Terraform Ansible Zero Trust IAM PAM IGA

Zero Trust Information Systems Security Engineer

Booz Allen Hamilton

Honolulu, HI 29 days ago $99,000$225,000
Zero Trust ICAM PAM Delinea SailPoint Radiant Logic Ping Federate Active Directory SAML OAuth 2.0 OpenID Connect NIST 800-207 Splunk Elastic Logstash Kibana Cribl Confluent PowerShell Ansible Terraform Python Puppet Chef IDS IPS Firewalls
3+ yrs exp

Information Assurance Security Engineer

General Dynamics

Arnold, MO +1 13 days ago $115,600$156,400
AWS RMF ACAS HBSS Carbon Black Tanium RedSeal EMET PowerShell Unix RHEL VMWare Firewalls IDS Load Balancers Network Routing VLAN
5+ yrs exp

Information Assurance Security Engineer

General Dynamics

Arnold, MO +1 13 days ago $149,469$159,850
AWS RMF ACAS HBSS Carbon Black Tanium RedSeal EMET PowerShell Unix RHEL VMWare Firewalls Web Gateways Mail Gateways IDS Load Balancers Network Routing VLAN
10+ yrs exp

Information Security Engineer

Lam Research

Fremont, CA 49 days ago $92,000$211,000
Silverfort Microsoft Defender for Identity Microsoft Defender for Endpoint Microsoft Defender for Cloud Microsoft Purview Netskope Palo Alto Networks Imperva Perception Point Microsoft Intune Security Copilot IAM DLP EPM WAF CSPM SIEM SOAR Vulnerability Management
8+ yrs exp Hybrid

API Security Engineer

Fiserv

Berkeley Heights, NJ +2 3 days ago $128,000$216,000
API Security OAuth2 OIDC JWT mTLS OpenAPI JSON Schema CI/CD DevSecOps SAST DAST Policy-as-Code WAF WAAP Service Mesh NIST ISO 27001 PCI DSS FAPI OWASP API Security Top 10 Traceable Salt Security NoName
5+ yrs exp