Senior Systems Engineer, Identity & Access Management

A hands-on senior engineer on Cloudflare's IAM team, which owns authentication and authorization for the control plane: every API call that configures Cloudflare's network, whether from customers, integrations or internal services, passes through it. Its scope includes sign-in and single sign-on, OAuth and API tokens, who belongs to which account, the permission and role model, and SCIM provisioning.

The engineer designs and builds fast, correctness-critical IAM services, helps move the auth systems toward distributed, edge-capable designs, turns product and security requirements into APIs, reviews code and owns platform reliability under constant load. Cloudflare wants five to eight years running production systems at scale, hands-on work implementing OAuth, OIDC, SAML or fine-grained authorization such as RBAC, ABAC or policy engines like Cedar, Go and TypeScript, REST API design, PostgreSQL and Redis, and strong distributed systems instincts.