Hybrid IAM Security Engineer — Austin

CloudFlare; San Francisco (CA); Hybrid; USD 150,000 - 190,000; Full time

Job summary

Cloudflare in Austin, Texas is seeking an IAM Security Engineer to design, implement, and scale identity and access management across our internal workforce and workloads. You will design, build, and automate IAM solutions, integrate SAML/OIDC/OAuth, and enforce Zero Trust controls while collaborating with security and engineering teams.

This hybrid role offers opportunities to work with cutting-edge AI-assisted tooling and to contribute to the resilience of Cloudflare's global network.

Qualifications

• Strong understanding of identity federation (SAML, OAuth, OpenID Connect).
• Experience with IGA including lifecycle management, SCIM, RBAC/ABAC, and access certifications.
• Hands-on automation skills; experience using AI/LLMs to solve ops problems.
• Experience with container platforms like Kubernetes and IaC tools (Terraform, Ansible).

Responsibilities

• Design, build, test, and deploy IAM solutions across authentication, authorization, and accounting.
• Leverage Cloudflare products to secure our identities.
• Build SSO integrations leveraging SAML, OIDC, OAuth, and SCIM.
• Build and manage the Identity Governance and Administration platform.
• Develop automated roles leveraging RBAC and ABAC.
• Build and manage a Privileged Access Management (PAM) platform.
• Provide operational support of IAM systems including an on-call rotation that may include after hours calls.

Skills

Identity federation

IGA solutions

Automation scripting

Kubernetes

Python/TypeScript/Bash

Zero Trust

IAM integration

ITDR

Terraform/Ansible

Tools

Terraform

Ansible

SAML/OIDC/OAuth

Job description

Cloudflare in Austin, Texas is seeking an IAM Security Engineer to design, implement, and scale identity and access management across our internal workforce and workloads. You will design, build, and automate IAM solutions, integrate SAML/OIDC/OAuth, and enforce Zero Trust controls while collaborating with security and engineering teams.

This hybrid role offers opportunities to work with cutting-edge AI-assisted tooling and to contribute to the resilience of Cloudflare's global network.