Cloudflare
IAM Security Engineer
Austin, TX, United States· HYBRID
About the role
The engineer designs and deploys identity and access management solutions, including SSO integrations with SAML, OIDC, OAuth and SCIM. The role manages identity governance, RBAC/ABAC and privileged access management, and includes an on-call rotation.
What you will do
- Build SSO integrations (SAML, OIDC, OAuth, SCIM)
- Manage identity governance and administration platforms
- Develop role- and attribute-based access controls
- Build and maintain privileged access management
- Provide operational support and on-call
What they ask for
- Strong understanding of identity federation protocols
- IGA implementation with lifecycle management
- Automation in Python, TypeScript or Bash, including use of AI/LLMs
- Kubernetes security configuration
- Zero Trust controls
- Terraform or Ansible
- Identity Threat Detection & Response
- Offer may depend on authorization to receive US export-controlled technology without sponsorship
What applying with Rooted means
This role accepts applications with Rooted context. Instead of sending only a resume, you can attach a verifiable credential with your proofs, rank, and technical evidence.
Your application includes your Rooted credential: rank, verified proofs, and supporting evidence.
You can read this role without an account. To apply you need a Rooted credential.
This role is curated by Rooted. Rooted is not the hiring company unless explicitly stated. The hiring company is Cloudflare. Confirm the final details with the original source or during the application process.
Posted 2026-09-11