Senior Systems Engineer, Identity & Access Management

Cloudflare, Inc

Confirmed live today High trust
Hybrid

Quick summary

Work type
Hybrid
Location
Austin, TXAtlanta, GADenver, COSan Francisco, CAWashington, DC
Posted
82 days ago
Freshness
Confirmed live today

Market check

Salary context

How this pay compares to similar roles

Similar $181k
$129k $225k
below market most similar roles pay here above market

This listing doesn't post a salary. Most similar roles pay $146,975–$215,875.

Based on 240 similar postings.

Employer

About Cloudflare, Inc

Cloudflare is a prominent cloud services and security company that provides content delivery network (CDN), DDoS mitigation, and Zero Trust security services to millions of internet properties.

Cloudflare, Inc currently has 110 open roles on FindRole.

Listed pay typically runs $194,000–$266,000 across 56 roles with salary data.

Most-posted roles

View all roles at Cloudflare, Inc

At a glance

TL;DR · Senior Systems Engineer, Identity & Access Management

The Senior Systems Engineer, Identity & Access Management joins the IAM team to manage the identity layer of the Control Plane. This role involves designing and building high-throughput, low-latency capabilities for authentication and authorization systems, including login, SSO, OAuth, and SCIM provisioning. You will own surfaces end-to-end, translating security requirements into robust REST APIs while ensuring platform reliability under constant load. Key technical requirements include proficiency in Go and Typescript, along with experience in PostgreSQL, Redis, and distributed systems. You must possess deep knowledge of identity protocols like OIDC, SAML, and RBAC/ABAC. The work focuses on solving correctness-critical problems for global-scale network traffic, requiring the ability to re-architect long-lived codebases using tools like Docker, Kubernetes, Terraform, and Prometheus while utilizing AI-assisted development workflows.

What does a Systems Engineer earn in California?

Median $191000 from 99 postings across 21 companies.

See salary data

What you'll do

  • Design and build high-throughput, low-latency IAM capabilities for customer-facing and internal service APIs.
  • Evolve authentication and authorization systems into modern, distributed, and edge-capable architectures.
  • Translate product and security requirements into robust technical specifications and well-structured APIs.
  • Maintain high engineering standards through thorough code reviews and technical design documentation.
  • Own platform reliability by building observability and resilience into services under constant load.
  • Use AI tools for code generation and debugging while applying professional judgment to the output.

What we're looking for

  • 5-8 years of experience building and operating production systems at scale (preferred).
  • Working knowledge of identity protocols including OAuth 2.0, OIDC, SAML, SCIM, RBAC/ABAC, and session management (preferred).
  • Hands-on experience implementing identity protocols or fine-grained authorization systems like Cedar in production (preferred).
  • Proficiency in Go and Typescript (preferred).
  • Experience designing and building REST APIs including routing, authentication, and versioning (preferred).
  • Experience with PostgreSQL and Redis for schema design, query optimization, and caching (preferred).
  • Strong distributed systems intuition regarding consistency models and event-driven replication (preferred).
  • Authorization to receive software or technology controlled under U.S. export control laws.

More like this

Similar roles

Principal Software Engineer, Enterprise Integrations

Cloudflare, Inc

Austin, TX 63 days ago
LLM APIs Python Go TypeScript Kubernetes AWS Lambda Google Cloud Functions Azure Functions Cloudflare Workers PostgreSQL GitLab CI/CD Grafana Prometheus Sentry Kibana Splunk Oracle NetSuite API-first Pub/Sub Batch Processing
10+ yrs exp Hybrid

Identity and Access Management Engineer

State Street

Clifton, NJ +1 63 days ago $125,000–$226,250
IAM CIAM Zero Trust Active Directory AD SSO IDP PKI HSM MFA Privileged Access Management RBAC ABAC Secret Vault Security Protocols DR Resilience

Identity and Access Management Engineer

Booz Allen Hamilton

Honolulu, HI 87 days ago
IAM Active Directory LDAP PingIdentity SailPoint Microsoft Identity Manager Saviynt One Identity Splunk ELK Stack PKI PIV IGA PAM Zero Trust ICAM SIEM Security Architecture Directory Services

Senior Identity & Access Management (IAM) Engineer

Allstate

Remote (IL) 61 days ago $98,100–$167,850
Identity and Access Management (IAM) SAML OAuth OpenID Connect (OIDC) Python JavaScript Groovy YAML PowerShell IBM Verify Identity Access IBM Verify Access IBM Security Access Manager (ISAM) PingOne Advanced Identity Cloud (PAIC) Ping Access PingFederate PingAM Okta ForgeRock Active Directory LDAP SSO Agile Scrum MFA IGA PAM
5+ yrs exp Remote