Sr. Security Software Engineer - Infra Security | Roblox NEW

The Briefed; San Mateo (CA); On-site; USD 251,000 - 307,000; Full time

Benefits offered by this job

Roblox equity package

Health, dental, and vision insurance

Onsite campus amenities

Vacation policies and parental leave

401(k) matching

Job summary

Roblox is seeking a Senior Security Software Engineer on the IAM team to build next-generation identity and access management for humans and autonomous AI agents across Roblox's hybrid production environment.

You will own the full lifecycle of security infrastructure services, mentor engineers, and shape policy enforcement, workload attestation, and PAM across multi-cloud and on-premises systems.

Qualifications

• 4+ years of relevant professional software engineering experience building scalable, distributed backend applications.
• Proficiency in at least one modern backend language (Go, Python, Java, C++, or C# .NET).
• Active usage of AI tools in daily workflows, strong understanding of LLM capabilities/limitations, and ability to architect identity boundaries for autonomous AI agents.
• System Architecture knowledge: RESTful API design, microservices, scalable containerized systems, and distributed architectures.
• Policy & Identity Frameworks familiarity: policy enforcement, workload attestation, and identity federation tools (OPA, Topaz, SPIFFE/SPIRE).
• PKI experience: enterprise certificate lifecycles; PAM familiarity; RBAC/ABAC/Risk-Based Access Control concepts.

Responsibilities

• Agentic IAM Architecture: Design and implement next-generation IAM frameworks for AI agents—defining lifecycle management, scoped permissions, credential issuance, and session governance.
• Hybrid Infrastructure IAM: Architect and scale identity solutions across Roblox's hybrid production environment (spanning multi-cloud and on-premises infrastructure) for humans, microservice workloads, and AI agents.
• Workload Authentication & Authorization: Build robust authentication mechanisms and attestation pipelines for production microservices, enforcing least-privilege principles and zero-trust controls.
• Developer Secure Golden Path: Develop and maintain a streamlined "golden path" framework that enables developers to ship services with security controls and IAM policies embedded by default.
• End-to-End Service Development: Own the full development lifecycle of security infrastructure services, microservices, and internal policy engines.
• Engineering Mentorship: Lead technical initiatives and mentor peer engineers across the infrastructure and security organizations.

Skills

Go

Python

Java

C++

C# .NET

Tools

OPA

Topaz

SPIFFE/SPIRE

Job description

As a Senior Security Software Engineer on the IAM team, you will build the next generation of identity and access management—defining how both humans and autonomous AI agents authenticate, receive credentials, and access Roblox's production infrastructure. As AI agents become first-class actors across production systems, you will pioneer the policy, tooling, and identity frameworks governing how AI agents prove identity and execute scoped operations safely at scale. Additionally, you will evolve workload attestation, Privileged Access Management (PAM), and the secure "golden path" framework for internal developers across Roblox's hybrid on-premises and cloud environments.

Key Responsibilities

AI Agent Identity & Hybrid Production IAM

• Agentic IAM Architecture: Design and implement next-generation IAM frameworks for AI agents—defining lifecycle management, scoped permissions, credential issuance, and session governance.
• Hybrid Infrastructure IAM: Architect and scale identity solutions across Roblox's hybrid production environment (spanning multi-cloud and on-premises infrastructure) for humans, microservice workloads, and AI agents.
• Workload Authentication & Authorization: Build robust authentication mechanisms and attestation pipelines for production microservices, enforcing least-privilege principles and zero-trust controls.
• Developer Secure Golden Path: Develop and maintain a streamlined "golden path" framework that enables developers to ship services with security controls and IAM policies embedded by default.

Technical Ownership & Mentorship

• End-to-End Service Development: Own the full development lifecycle of security infrastructure services, microservices, and internal policy engines.
• Engineering Mentorship: Lead technical initiatives and mentor peer engineers across the infrastructure and security organizations.

Requirements

Technical Depth & Security Engineering Foundations

• Experience Track: 4+ years of relevant professional software engineering experience building scalable, distributed backend applications.
• Programming Proficiency: Proficiency in at least one modern backend language (Go, Python, Java, C++, or C# .NET).
• AI Tooling & Agentic Fluency: Active usage of AI tools in daily workflows, strong understanding of LLM capabilities/limitations, and ability to architect identity boundaries for autonomous AI agents.
• System Architecture: Solid knowledge of RESTful API design, microservice design patterns, scalable containerized systems, and distributed architectures.
• Policy & Identity Frameworks: Familiarity with modern policy enforcement, workload attestation, and identity federation tools (e.g., OPA, Topaz, SPIFFE/SPIRE).
• Public Key Infrastructure (PKI): Practical experience designing, implementing, or managing enterprise PKI architectures and certificate lifecycles.
• Privileged Access Management (PAM): Experience with PAM solutions to control, monitor, and audit privileged access across production environments.
• Access Control Models: Understanding of formal access control paradigms (RBAC, ABAC, or Risk-Based Access Control).

Preferred Qualifications

• Hands-on experience scaling SPIFFE/SPIRE attestation across hybrid Kubernetes and bare-metal environments.
• Direct experience authoring custom OPA Rego policies or fine-grained authorization (FGA) engines.
• Background in zero-trust architecture implementation within large-scale production environments.

Total Rewards & Benefits

• Compensation & Equity: San Mateo base salary range ($251,090 – $306,730 USD) + competitive Roblox equity compensation package.
• Healthcare & Wellbeing: Comprehensive health, dental, and vision insurance packages for employees and eligible dependents.
• Onsite Perks & Campus: Modern San Mateo headquarters featuring daily catered meals, team events, and state-of-the-art technical setups.
• Time Off & Retirement: Generous vacation policies, paid company holidays, paid parental leave, and 401(k) matching programs.