jobapplierIAM Security Engineer
- United Kingdom
- Mid Level
- Posted
Skills
Required
- Identity Governance and Administration
- SCIM
- SAML
- OAuth
- infrastructure as code
- configuration management
- Terraform
- Ansible
- secure configuration
- Kubernetes
- AI / LLMs
- Python
- TypeScript
- Bash
Preferred
- IAM
- authentication
- authorization
- Identity Governance
- Build SSO integrations
- OIDC
Join Cloudflare's Identity and Access Management (IAM) team as an IAM Security Engineer. In this role, you will design, implement, and scale IAM solutions for our internal workforce and workloads. You will be responsible for safeguarding our systems, applications, and data by ensuring secure user access, authentication, and authorization mechanisms. You will also provide operational support for IAM systems and participate in an on-call rotation. Enjoy a competitive pay package, flexible vacation policy, paid parental leave, comprehensive benefits, and commuter support.
Responsibilities
- Design, build, test, and deploy IAM solutions across authentication, authorization, and accounting.
- Build SSO integrations leveraging SAML, OIDC, OAuth, and SCIM, and manage the Identity Governance and Administration platform.
- Provide operational support of IAM systems including an on-call rotation that may include after hours calls.
Requirements
- Experience working with infrastructure as code and configuration management tools like Terraform, Ansible, etc
- Experience with secure configuration of containerized application platforms (e.g. Kubernetes)
- Demonstrated ability to build production-grade automation scripts and tools. Must possess hands-on engineering experience leveraging AI/LLMs to solve operational or technical challenges
- Experience implementing Identity Governance and Administration (IGA) solutions including lifecycle management, SCIM, birthright access (RBAC, ABAC), and access certifications
- Experience with Identity and Access Management policy application and enforcement
- Experience working with Identity Threat Detection & Response (ITDR)
- Advanced scripting experience (Python, TypeScript, Bash, etc.)
- Strong understanding of identity federation (SAML, OAuth, OpenID Connect, etc.)
- Experience integrating with applications and SaaS solutions
- Security engineers take part in a wide variety of tasks and projects in the team. One individual is not expected to know everything, but a working knowledge in several of the following areas is required:
- Experience implementing Zero Trust controls