IAM Security Engineer

An engineer on Cloudflare's internal Identity and Access Management team, designing and scaling how the company's workforce and workloads are authenticated and authorised. The role is hybrid from Austin.

The engineer builds SSO integrations with SAML, OIDC, OAuth and SCIM, runs the identity governance, access certification and privileged access platforms, automates role-based and attribute-based access, uses Cloudflare's own products to protect identities, and shares an on-call rotation. Cloudflare looks for working knowledge across several areas: identity federation, IGA and lifecycle management, production automation that makes real use of AI and LLMs, Kubernetes configuration, Python or TypeScript scripting, Zero Trust controls, identity threat detection and response, and Terraform or Ansible.