Principal IAM Security Engineer – Enterprise

OneClick Smart Resume; San Mateo (CA); On-site; USD 385,050 - 443,200; Full time

Benefits offered by this job

Equity compensation

Benefits package

Job summary

Roblox is seeking a Principal Security Software Engineer to advance the Enterprise IAM strategy, building production‑grade identity systems and integrations at scale. You will partner with InfoSec, Corporate Engineering, DevOps, and Product teams to embed security across enterprise systems and developer workflows.

The role emphasizes hands‑on engineering, policy enforcement, and secure architecture, requiring deep knowledge of OAuth, SCIM, SAML, and related standards, plus leadership in security

Qualifications

• 10+ years of experience combining SWE and security.
• Deep understanding of IAM and authentication protocols.
• Experience with policy-as-code frameworks.
• Engineering-first mindset building scalable security platforms.

Responsibilities

• Build identity and access systems across Roblox's IAM ecosystem, including SSO, SCIM provisioning, OAuth 2.0, and token lifecycle management.
• Lead security automation with production‑quality tools that enforce policies at scale.
• Drive secure‑by‑design implementations with cross‑functional teams.
• Evaluate vendor platforms and build integrations and automation layers for scale.

Skills

OAuth 2.0

SCIM 2.0

SAML 2.0

FIDO2/WebAuthn

Passkeys

OPA/Rego

Cedar

Python

Go

Rust

Zero Trust

Threat modeling

Job description

Roblox is seeking a Principal Security Software Engineer to advance the Enterprise IAM strategy, building production‑grade identity systems and integrations at scale. You will partner with InfoSec, Corporate Engineering, DevOps, and Product teams to embed security across enterprise systems and developer workflows.

The role emphasizes hands‑on engineering, policy enforcement, and secure architecture, requiring deep knowledge of OAuth, SCIM, SAML, and related standards, plus leadership in security