IAM Security Engineer: Identity & Access Innovator

Webhosting; Austin, Northern (TX, KY); Hybrid; USD 120,000 - 190,000; Full time

Job summary

Cloudflare is seeking an Identity and Access Management (IAM) Security Engineer to design, implement, and scale IAM solutions for internal users and workloads. You will secure user access, authentication, and authorization across systems, applications, and data.

You will build SSO integrations, develop IGA capabilities, automate access controls (RBAC/ABAC), and support ongoing IAM operations. The role emphasizes collaboration, security, and reliable, scalable identity infrastructure.

Qualifications

• Strong knowledge of identity federation (SAML, OAuth, OpenID Connect).
• Experience implementing IGA solutions including lifecycle management, SCIM, RBAC/ABAC, and access certifications.
• Hands-on automation using AI/LLMs to solve operational or technical challenges.
• Experience with secure configuration of containerized platforms (Kubernetes).

Responsibilities

• Design, build, test, and deploy IAM solutions across authentication, authorization, and accounting.
• Leverage Cloudflare products to secure identities and access.
• Build SSO integrations using SAML, OIDC, OAuth, and SCIM.
• Develop Identity Governance and Administration platform and automate RBAC/ABAC.
• Manage access certification, PAM, and Privileged access controls.
• Provide on-call operational support for IAM systems.

Skills

Identity federation

RBAC

ABAC

SCIM

Kubernetes

Python

TypeScript

Automation scripting

ITDR

Zero Trust

Tools

Terraform

Ansible

Job description

Cloudflare is seeking an Identity and Access Management (IAM) Security Engineer to design, implement, and scale IAM solutions for internal users and workloads. You will secure user access, authentication, and authorization across systems, applications, and data.

You will build SSO integrations, develop IGA capabilities, automate access controls (RBAC/ABAC), and support ongoing IAM operations. The role emphasizes collaboration, security, and reliable, scalable identity infrastructure.