Security Engineer (IAM)

Cloudflare, Inc

Confirmed live yesterday High trust

Quick summary

Work type
On-site
Location
Bengaluru, India
Posted
29 days ago
Freshness
Confirmed live yesterday

Market check

Salary context

How this pay compares to similar roles

Similar $174k
$120k most similar roles pay here $227k

This listing doesn't post a salary. Most similar roles pay $145,000–$203,000.

Based on 240 similar postings.

Employer

About Cloudflare, Inc

Cloudflare is a prominent cloud services and security company that provides content delivery network (CDN), DDoS mitigation, and Zero Trust security services to millions of internet properties.

Cloudflare, Inc currently has 190 open roles on FindRole.

Listed pay typically runs $215,000–$278,000 across 59 roles with salary data.

Most-posted roles

View all roles at Cloudflare, Inc

At a glance

TL;DR · Security Engineer (IAM)

Security Engineer (IAM) joins the Identity and Access Management team to design, build, test, and deploy solutions for internal workforce and workloads. This role focuses on safeguarding systems through secure authentication, authorization, and accounting mechanisms while managing identity governance and privileged access platforms. The engineer will develop automated roles using RBAC and ABAC, manage access certification platforms, and provide operational support including an on-call rotation. Key technical requirements include experience with SAML, OIDC, OAuth, and SCIM for SSO integrations. Candidates should possess skills in Python, TypeScript, or Bash scripting, as well as experience with Terraform, Ansible, and Kubernetes. The role addresses the critical challenge of securing internal infrastructure against unauthorized access while ensuring seamless user experiences through Zero Trust controls and Identity Threat Detection and Response within a complex corporate environment.

What does a Security Engineer earn?

Median $185250 from 84 postings across 39 companies.

See salary data

What you'll do

  • Design, build, test, and deploy IAM solutions across authentication, authorization, and accounting.
  • Build SSO integrations using SAML, OIDC, OAuth, and SCIM protocols.
  • Manage the Identity Governance and Administration platform including lifecycle management and access certifications.
  • Develop automated roles utilizing RBAC and ABAC frameworks.
  • Build and manage a Privileged Access Management (PAM) platform.
  • Provide operational support for IAM systems, including participation in an on-call rotation.
  • Create production-grade automation scripts and tools using AI/LLMs to solve technical challenges.

What we're looking for

  • Must have 5-10 years of experience in identity federation including SAML, OAuth, and OpenID Connect.
  • Experience implementing Identity Governance and Administration (IGA) solutions including lifecycle management, SCIM, RBAC, ABAC, and access certifications.
  • Demonstrated ability to build production-grade automation scripts and tools.
  • Must have hands-on engineering experience leveraging AI/LLMs to solve operational or technical challenges.
  • Advanced scripting experience in languages such as Python, TypeScript, or Bash.
  • Experience with secure configuration of containerized application platforms like Kubernetes (preferred).
  • Experience implementing Zero Trust controls (preferred).
  • Export control laws, including the U.S. Export Administration Regulations.

More like this

Similar roles

Senior Security Engineer I, IAM

Oscar Health

New York, NY 56 days ago
Okta Google Workspace Identity AWS BigQuery SAML OAuth OIDC SCIM LDAP IAM SIEM SOAR UEBA ITDR
4+ yrs exp Hybrid

Zero Trust Information Systems Security Engineer

Booz Allen Hamilton

Honolulu, HI 23 days ago $99,000$225,000
Zero Trust ICAM PAM Delinea SailPoint Radiant Logic Ping Federate Active Directory SAML OAuth 2.0 OpenID Connect NIST 800-207 Splunk Elastic Logstash Kibana Cribl Confluent PowerShell Ansible Terraform Python Puppet Chef IDS IPS Firewalls
3+ yrs exp

Ping Identity Engineer

Booz Allen Hamilton

Scott AFB, IL 3 days ago $86,800$198,000
Ping Federate Entra ID ADFS SAML 2.0 OAuth 2.0 OpenID Connect SSO RBAC ABAC Active Directory LDAP Zero Trust MFA SCIM Okta Workflows Python PowerShell Bash AWS Azure

Senior Ping Identity Engineer

Booz Allen Hamilton

Scott AFB, IL 3 days ago $86,800$198,000
Ping Federate Entra ID ADFS SAML 2.0 OAuth 2.0 OpenID Connect RBAC ABAC Active Directory LDAP Zero Trust MFA AWS Azure Google Cloud SCIM Okta Workflows Python PowerShell Bash

Staff Security Engineer, IAM

GitLab

Remote (Canada) 11 days ago $168,000$238,000
IAM Okta Terraform OpenTofu Pulumi Python GCP AWS infrastructure-as-code SCIM zero-trust SaaS FedRAMP SOC2 SOX Identity Governance Cloud Run Anthropic Claude
Remote