Cloudflare
IAM Security Engineer
Hybrid +1 · Full-time · Posted Sep 11, 2026
- Location
- Hybrid
Austin, TX, United States - Visa sponsorship
- An offer may be conditioned on authorization to receive software or technology controlled under U.S. export laws without sponsorship for an export license.
About the job
Designs, builds, and operates identity and access management solutions to secure Cloudflare’s internal workforce, workloads, systems, applications, and data.
What you'll do
- Design, build, test, and deploy IAM solutions for authentication, authorization, and accounting, including SSO integrations.
- Build and manage IGA, access certification, and privileged access management platforms, and develop RBAC and ABAC roles.
- Provide IAM operational support, including participation in an on-call rotation that may include after-hours calls.
What they ask for
- Working knowledge in several listed IAM and security areas, including identity federation and IAM policy enforcement.
- Experience implementing IGA solutions, including lifecycle management, SCIM, RBAC/ABAC birthright access, and access certifications.
- Demonstrated ability to build production-grade automation scripts and tools, with hands-on engineering experience using AI/LLMs to solve operational or technical challenges.
- Advanced scripting experience (Python, TypeScript, Bash, etc.).
Nice to have
- Experience with secure configuration of containerized application platforms (e.g. Kubernetes).
- Experience with Zero Trust controls, ITDR, SaaS integrations, or infrastructure as code and configuration management tools like Terraform and Ansible.
Tools
SAML, OIDC, OAuth, SCIM, RBAC, ABAC, Python, TypeScript
AI focus
Hands-on use of AI/LLMs to solve operational or technical challenges.
Model-written summary · the original posting is authoritative