Principal IAM & Access Security Architect

Roblox; San Mateo (CA); On-site; USD 326,000 - 385,000; Full time

Job summary

Roblox is seeking a Principal Security Software Engineer to set the technical direction for identity and access across its production infrastructure. You will define end-to-end identity for machine, workload, human, and AI-agent access in a hybrid on‑prem and cloud environment, and drive secure enforcement through SPIFFE/SPIRE, service mesh, and vault-based secret management.

You will lead architecture, publish RFCs, mentor senior engineers, and shape multi-year roadmaps while enabling

Qualifications

• 8+ years of relevant professional experience building scalable, distributed backend systems.
• Deep expertise in identity and access management — authentication, authorization, and access-control models such as RBAC, ABAC, or risk-based access control.
• Hands-on experience with PKI, mTLS, SPIFFE/SPIRE, service mesh, secret management (e.g., Vault), and PAM.
• Proficiency in at least one systems language such as Go, Rust, Java, C++, Python, or C#/.NET.
• Experience leading the technical work of other engineers — setting direction across teams, writing influential design docs, and mentoring senior talent.
• AI fluency: you use AI tools in your daily workflow, understand LLM capabilities and limitations, and can reason about AI agent identities and permissions.
• A Bachelor's degree or equivalent experience in Computer Science, Computer Engineering, or a similar technical field.

Responsibilities

• Lead the architecture for production identity and access across Roblox's hybrid on‑prem and cloud fleet.
• Drive mTLS and workload identity to full production enforcement.
• Advance just‑in‑time, least-privilege access for engineers with auditable, short-lived credentials.
• Mature the centralized authorization engine and RBAC/ABAC models for consistency and testability.
• Define patterns for AI agent identity and scoped permissions across lifecycle.
• Draft RFCs and roadmaps; mentor engineers and raise technical bar.

Skills

IAM expertise

Distributed backend

System design

Go

Rust

Java

Python

C++

C#/.NET

Education

Bachelor's degree in CS/CE or related field

Tools

PKI & TLS

mTLS

SPIFFE/SPIRE

Service mesh

Vault

Job description

Roblox is seeking a Principal Security Software Engineer to set the technical direction for identity and access across its production infrastructure. You will define end-to-end identity for machine, workload, human, and AI-agent access in a hybrid on‑prem and cloud environment, and drive secure enforcement through SPIFFE/SPIRE, service mesh, and vault-based secret management.

You will lead architecture, publish RFCs, mentor senior engineers, and shape multi-year roadmaps while enabling