# IAM Security Engineer

**Company:** [Cloudflare](https://hotfix.jobs/companies/cloudflare)
**Location:** Austin, TX
**Role:** Security Engineering
**Skills:** IAM, SAML, OIDC, OAuth, SCIM, RBAC, Abac, Python, TypeScript, Bash, Kubernetes, Terraform, Ansible, Zero Trust, Pam
**Posted:** 2026-09-11

> Designs and operates identity and access management systems covering federation, governance, privileged access, automation, and Zero Trust controls. Requires hands-on scripting and IAM engineering experience, including production automation and AI/LLM usage.

## Job Description

## Responsibilities
- Design, build, test, and deploy IAM solutions for authentication, authorization, and accounting.
- Use Cloudflare products to secure identities.
- Build SSO integrations using SAML, OIDC, OAuth, and SCIM.
- Build and manage Identity Governance and Administration (IGA), access certification, and Privileged Access Management (PAM) platforms.
- Develop automated roles using RBAC and ABAC.
- Provide operational support for IAM systems, including an on-call rotation that may involve after-hours calls.

## Requirements and Preferred Qualifications
- Strong understanding of identity federation, including SAML, OAuth, and OpenID Connect.
- Experience implementing IGA solutions, including lifecycle management, SCIM, birthright access, RBAC, ABAC, and access certifications.
- Production-grade automation scripting and tool development experience.
- Hands-on engineering experience using AI and large language models to solve operational or technical challenges.
- Experience securely configuring containerized application platforms such as Kubernetes.
- Advanced scripting experience with Python, TypeScript, or Bash.
- Experience implementing Zero Trust controls.
- Experience integrating with applications and SaaS solutions.
- Experience applying and enforcing IAM policies.
- Experience with Identity Threat Detection and Response (ITDR).
- Experience with infrastructure as code and configuration management tools such as Terraform and Ansible.

## Similar jobs

- [Security and Threat Operations Engineer](https://hotfix.jobs/jobs/46f0222c-d121-4ecc-90c4-448c120484e0) - OnePay - Remote - $140k – $190k/yr
- [Systems Engineer, Corporate Security](https://hotfix.jobs/jobs/60e4bbe5-986f-4cbb-a73c-f9ff000445bf) - Ramp - New York, NY - $144k – $199k/yr
- [GRC Analyst - Public Sector](https://hotfix.jobs/jobs/5d73adaf-d124-4e28-8493-34bc2fc418bc) - Socure - Washington, DC - $120k – $145k/yr
- [Security Incident Response Engineer](https://hotfix.jobs/jobs/c411e5b7-a111-4df8-92a2-6ed986ce0392) - Stripe - Remote
- [Data Verification Operator](https://hotfix.jobs/jobs/a91b39b4-af34-4bb8-b7d0-4975b5740887) - Ambient.ai - Redwood City, CA - $50k – $50k/yr

**Apply:** https://hotfix.jobs/jobs/6e53066a-b2ad-4f77-992e-658e48e02dc3
**Canonical:** https://hotfix.jobs/jobs/6e53066a-b2ad-4f77-992e-658e48e02dc3