IAM Security Engineer

About Us

Cloudflare is on a mission to help build a better Internet. The company runs one of the world’s largest networks, powering millions of websites and other Internet properties for customers ranging from individual bloggers to SMBs to Fortune 500 companies. Cloudflare protects and accelerates any Internet application online without adding hardware, installing software, or changing a line of code. Traffic is routed through an intelligent global network that gets smarter with every request, delivering performance improvements and reducing spam and attacks.

Cloudflare has been named to Entrepreneur Magazine’s Top Company Cultures list and ranked among the World’s Most Innovative Companies by Fast Company.

Location: Hybrid from Austin, TX

About the Department

The Identity and Access Management (IAM) team ensures secure and efficient management of user identities, access privileges, and authentication mechanisms across internal systems, applications, and data. The team safeguards the organization against unauthorized access, protects sensitive information, and enables seamless user experiences while adhering to industry best practices and compliance standards.

About the Role

The IAM Security Engineer will design, implement, and scale identity and access management solutions for Cloudflare’s internal workforce and workloads, safeguarding systems, applications, and data through secure user access, authentication, and authorization mechanisms.

Responsibilities

• Design, build, test, and deploy IAM solutions across authentication, authorization, and accounting.
• Leverage Cloudflare products to secure identities.
• Build SSO integrations using SAML, OIDC, OAuth, and SCIM.
• Develop and manage the Identity Governance and Administration platform.
• Create automated roles leveraging RBAC and ABAC.
• Build and manage an access certification platform.
• Build and manage a Privileged Access Management (PAM) platform.
• Provide operational support of IAM systems, including participation in an on‑call rotation that may involve after‑hours calls.

Requirements

• Strong understanding of identity federation (SAML, OAuth, OpenID Connect, etc.).
• Experience implementing Identity Governance and Administration (IGA) solutions, including lifecycle management, SCIM, birthright access (RBAC, ABAC), and access certifications.
• Demonstrated ability to build production‑grade automation scripts and tools.
• Hands‑on engineering experience leveraging AI/LLMs to solve operational or technical challenges.
• Experience with secure configuration of containerized application platforms (e.g., Kubernetes).
• Advanced scripting experience (Python, TypeScript, Bash, etc.).
• Experience implementing Zero Trust controls.
• Experience integrating with applications and SaaS solutions.
• Experience with IAM policy application and enforcement.
• Experience working with Identity Threat Detection & Response (ITDR).
• Experience with infrastructure as code and configuration management tools such as Terraform, Ansible, etc.

What Makes Cloudflare Special

Cloudflare combines ambitious large‑scale technology with a soul, protecting the free and open Internet. Notable initiatives include:

• Project Galileo: Since 2014, providing over 2,400 journalism and civil‑society organizations in 111 countries with tools to defend against censorship‑related attacks.
• Athenian Project: Launched in 2017 to ensure state and local governments have high‑level protection and reliability for free election information, serving more than 425 local‑government election websites across 33 states.
• 1.1.1.1: A public DNS resolver that improves speed, security, and privacy for all users, with a strict no‑logging policy.