Senior IAM Engineer: Global Identity & Access

Triwill Group; United States; Hybrid; USD 180,000 - 240,000; Full time

Job summary

Cloudflare is seeking a hands-on senior IAM engineer to own authentication and authorization at global scale. You will design high-throughput services and APIs, and work across product, security, and UX teams to meet security requirements.

You will apply expertise in Go and TypeScript, OAuth/OIDC/SAML, and RBAC/ABAC, shaping distributed architectures while maintaining strong observability and security standards.

Qualifications

• 5-8 years of production systems experience at scale.
• Hands-on experience with identity protocols or fine-grained authorization systems (OAuth 2.0, OIDC, SAML, SCIM, RBAC/ABAC).
• Proficiency in Go and TypeScript; comfortable across Cloudflare’s tech stack.
• Experience designing and building REST APIs: routing, authentication, lifecycle, versioning.
• PostgreSQL and Redis experience: schema design, caching, consistency.

Responsibilities

• Feature development: design high-throughput IAM capabilities powering APIs.
• System evolution: evolve authentication/authorization systems for distributed architectures.
• API and system design: translate requirements into robust APIs and specs.
• Engineering excellence: conduct thorough code reviews and maintain design docs.
• Operational stewardship: ensure platform reliability under load with observability.
• AI-assisted development: use AI tools responsibly across the workflow.

Skills

Production systems

Identity protocols

Go

Typescript

REST APIs

Distributed systems

Security standards

Tools

Docker

Kubernetes

Terraform

Prometheus

Grafana

Kibana

PostgreSQL

Redis

Job description

Cloudflare is seeking a hands-on senior IAM engineer to own authentication and authorization at global scale. You will design high-throughput services and APIs, and work across product, security, and UX teams to meet security requirements.

You will apply expertise in Go and TypeScript, OAuth/OIDC/SAML, and RBAC/ABAC, shaping distributed architectures while maintaining strong observability and security standards.