Iam Security Engineer Jobs

Every day, tens of millions of people come to Roblox to explore, create, play, learn, and connect with friends in 3D immersive digital experiences– all created by our global community of developers and creators. At Roblox, we’re building the tools and platform that empower our community to bring any experience that they can imagine to life. Our vision is to reimagine the way people come together, from anywhere in the world, and on any device. We’re on a mission to connect a billion people with optimism and civility, and looking for amazing talent to help us get there. A career at Roblox means you’ll be working to shape the future of human interaction, solving unique technical challenges at scale, and helping to create safer, more civil shared experiences for everyone. As a Principal Security Software Engineer on the Production IAM team, you will set the technical direction for how identity and access work across Roblox's production infrastructure, from the mTLS-based identity that services use to authenticate to one another, to the privileged access controls that govern how engineers reach production. The team is accountable for Roblox's machine and workload identity platform, its centralized authorization engine, its production access management platform, production PKI and certificate lifecycle, and just-in-time privileged access for engineers. As an individual contributor in Production IAM, you will define multi-year strategy, drive alignment across Roblox Platform, mentor senior and staff engineers, and personally build the hardest parts of these systems. As AI agents become first-class actors in production, you will also help pioneer how they get identity, prove who they are, and receive safely-scoped access. You will Lead the architecture for production identity and access. Define and evolve the end-to-end design for machine, workload, human, and AI-agent identity across our hybrid on-prem and cloud fleet, making secure access invisible when

About Vercel: Vercel is the agentic infrastructure company, freeing people and agents to ship what's next. For more than a decade we've helped builders move from idea to production with speed, security, and exceptional developer experience. Now we're scaling our products for both agents and people to ship and run software, built in the open and trusted by OpenAI, PayPal, Ramp, Supreme, and millions of developers worldwide. About the role We are looking for a Security Software Engineer, IAM, to build identity and access management (IAM) infrastructure as software, not administer identity products, and this role suits a software engineer who has gone deep on identity or an IAM engineer with a strong engineering background. You will own identity and IAM end to end, replacing the approval queue with access that is self-serve, time-bound, and provable, built so identity is defined as code, reviewed in pull requests, deployed through CI, and observable in production, and you will help decide how agents act on behalf of users and systems. This is a hybrid role based in San Francisco or New York City, with three days a week in the office. What you’ll do: Migrate Okta and related IAM configuration to Terraform so every identity change is reviewed, tested, and versioned, and help engineering teams adopt infrastructure as code Build a self-serve access platform, including just-in-time (JIT) access, that lets team and system owners define, request, and time-bound their own access Own provisioning, deprovisioning, and access review workflows that generate System and Organization Controls 2 (SOC 2) audit evidence automatically Unify corporate IAM (employee identity, SaaS access, devices) and production IAM (service accounts, infrastructure permissions, on-call access) into one identity plane, and enforce least-privilege access across cloud, SaaS, and production infrastructure Define and build how agents request and hold access, working with the Accounts team on product-facing ide

Every day, tens of millions of people come to Roblox to explore, create, play, learn, and connect with friends in 3D immersive digital experiences– all created by our global community of developers and creators. At Roblox, we’re building the tools and platform that empower our community to bring any experience that they can imagine to life. Our vision is to reimagine the way people come together, from anywhere in the world, and on any device. We’re on a mission to connect a billion people with optimism and civility, and looking for amazing talent to help us get there. A career at Roblox means you’ll be working to shape the future of human interaction, solving unique technical challenges at scale, and helping to create safer, more civil shared experiences for everyone. As a Senior Security Software Engineer on the IAM team at Roblox, you'll build the next generation of identity and access management — defining how both humans and AI agents get identity, authenticate, and receive access to Roblox's production infrastructure. As AI agents become first-class actors in our systems, you'll design the tooling and policy that governs what they can do, how they prove who they are, and how we keep that access safe at scale. You'll also continue to evolve our workload authentication, privileged access management, and secure "golden path" for developers. Your work will directly shape the security posture of our entire production environment and set the standard for agentic IAM across the industry. You will: Design Identity and Access for AI Agents: You will define how AI agents get credentials, receive scoped permissions, and have their sessions managed throughout their lifecycle — pioneering the patterns for agentic identity in production. Engineer Hybrid Production IAM at Scale: You will design and implement scalable IAM solutions for Roblox's hybrid production environment, spanning on-premises and cloud infrastructure, ensuring secure and efficient access for hum

Every day, tens of millions of people come to Roblox to explore, create, play, learn, and connect with friends in 3D immersive digital experiences– all created by our global community of developers and creators. At Roblox, we’re building the tools and platform that empower our community to bring any experience that they can imagine to life. Our vision is to reimagine the way people come together, from anywhere in the world, and on any device. We’re on a mission to connect a billion people with optimism and civility, and looking for amazing talent to help us get there. A career at Roblox means you’ll be working to shape the future of human interaction, solving unique technical challenges at scale, and helping to create safer, more civil shared experiences for everyone. As a Senior Security Software Engineer for Infrastructure Security you will be a part of the Information Security organization and report to the Senior Manager of Infrastructure Security. You will help shape the future of Platform Security at Roblox. We work closely with Production IAM, Network Security, and Cloud Security at Roblox. You Will: Identify security gaps and threats in our cloud and on premise infrastructure, partnering with Governance Risk and Compliance teams to create standards and policies along the way. This will help Roblox meet regulatory and compliance requirements. Harden our infrastructure by introducing secure by default configurations, designs and guardrails for all developers at Roblox. Own and drive solutions that enable Roblox engineers to design, build, and use infrastructure securely at scale. Work closely with other InfoSec teams (AppSec, D&R, GRC, CorpSec, CloudSec, NetSec) and partner with engineering teams across Roblox, specifically the Infrastructure organization, to ensure the secure outcomes of security and product driven initiatives. You Have: 5+ years of experience writing code and/or relevant technical experience. Experience with

Who are we? Cohere is the leading security-first enterprise AI company. We build cutting-edge foundation AI models and end-to-end products that are designed to solve real-world business problems. We’re training and deploying frontier models for enterprises who are building AI systems. We believe that our work is instrumental to the widespread adoption of AI and we are looking for folks that want to be part of that. We obsess over what we build. Each one of us is responsible for contributing to increasing the capabilities of our models and the value they drive for our customers. Cohere is a team of researchers, engineers, designers, and more, who are all passionate about their craft. We are a global technology company headquartered in Toronto with key offices in London, New York City, San Francisco, Montreal, Paris, Berlin and Seoul. Join us! As a Senior Security Operations Engineer you will: Serve as trusted advisor to team’s leadership and partner teams by clearly articulating business risks associated with security issues Harden our cloud-native environments (AWS, OCI, GCP) by introducing secure by default designs and features into network, tooling, and processes Own and drive resolutions for enabling engineers to design, build, and use infrastructure securely at scale by deploying secure architectures using infrastructure-as-code and reusable code libraries Manage IAM / RBAC for cloud infrastructure, and partner with IT on streamling authentication/authorization to ensure unified access control across the board Deploy and operationalize some of the security services and tools (eg: SIEM, SOAR, domain monitoring, endpoint tooling, cloud security tooling) Respond to security incidents and harden environments post-incidents. Support control monitoring and remediation for compliance initiatives Gather and analyze security metrics to address security issues with cross-team dependencies Be a problem solver who is empathetic to developer concerns and will employ construc

Who are we? Cohere is the leading security-first enterprise AI company. We build cutting-edge foundation AI models and end-to-end products that are designed to solve real-world business problems. We’re training and deploying frontier models for enterprises who are building AI systems. We believe that our work is instrumental to the widespread adoption of AI and we are looking for folks that want to be part of that. We obsess over what we build. Each one of us is responsible for contributing to increasing the capabilities of our models and the value they drive for our customers. Cohere is a team of researchers, engineers, designers, and more, who are all passionate about their craft. We are a global technology company headquartered in Toronto with key offices in London, New York City, San Francisco, Montreal, Paris, Berlin and Seoul. Join us! As a Senior Security Operations Engineer you will: Serve as trusted advisor to team’s leadership and partner teams by clearly articulating business risks associated with security issues Harden our cloud-native environments (AWS, OCI, GCP) by introducing secure by default designs and features into network, tooling, and processes Own and drive resolutions for enabling engineers to design, build, and use infrastructure securely at scale by deploying secure architectures using infrastructure-as-code and reusable code libraries Manage IAM / RBAC for cloud infrastructure, and partner with IT on streamling authentication/authorization to ensure unified access control across the board Deploy and operationalize some of the security services and tools (eg: SIEM, SOAR, domain monitoring, endpoint tooling, cloud security tooling) Respond to security incidents and harden environments post-incidents. Support control monitoring and remediation for compliance initiatives Gather and analyze security metrics to address security issues with cross-team dependencies Be a problem solver who is empathetic to developer concerns and will employ construc

CAPCO POLAND *We are looking for Poland based candidate. Capco is a fully independent, global management and technology consultancy. For 25 years we have combined innovative thinking with deep industry knowledge to deliver business consulting, digital transformation and technology services to Finance and Energy markets. Our collaborative and efficient approach helps clients reduce costs and manage risk and regulatory change while increasing revenues. We are thinkers, innovators, and disruptors. We are small enough to care but large enough to matter. As an IT Security Analyst , you will play a key role in supporting a large-scale Secrets & Credential Management initiative. You will analyze current-state environments, identify control gaps, and define robust, scalable security requirements. Working across technical and business teams, you will help ensure that sensitive credentials are governed, controlled, and aligned with regulatory and operational expectations. Key Responsibilities: Conduct end-to-end analysis of secrets and credential management practices across applications, infrastructure, and platforms Identify, classify, and document secrets, including ownership, usage, storage, lifecycle stage, and associated risks Assess control gaps (e.g., unmanaged credentials, hardcoded secrets, weak auditability) and define remediation approaches Define functional and non-functional requirements for centralized secrets management solutions Facilitate workshops with stakeholders to gather requirements, validate findings, and support governance activities Required Skills and Experience: At least 5 years of experience in a similar role. At least 2 years of experience in working with IAM projects. Experience in IT security analysis, security requirements engineering, or security governance within complex environments Strong understanding of IAM, PAM, least privilege, and secure access governance principles Knowledge of credential types (passwords, SSH

About the Team & Role: We're building Rubrik Agent Cloud, the enterprise platform to monitor, govern, and remediate AI agents. Our team operates at the intersection of AI, distributed systems, and enterprise security, creating solutions that make it possible for organizations to operate production-grade AI agents at scale. As a member of the Rubrik Agent Cloud team, you'll work with cutting-edge AI technologies while solving complex challenges in scaling, security, and performance. We're a collaborative team passionate about pushing the boundaries of what's possible with enterprise AI infrastructure. Nature of the Specialized Duties ➢ Architecting and Governing Secure Multi-Cloud Foundations (30% of time) Leading the end-to-end architectural design and onboarding of complex business units into a multi-cloud ecosystem (AWS, Azure, GCP, OCI), ensuring structural parity across disparate environments. Engineering secure "Landing Zones" and multi-tenant structures using advanced Identity and Access Management (IAM) hierarchies and automated policy enforcement. Developing and implementing global Role-Based Access Control (RBAC) models and Attribute-Based Access Control (ABAC) frameworks to manage granular permissions for AI agent workloads. Designing and governing resource hierarchy models and tagging standards that utilize metadata for automated lifecycle management and complex cost-attribution algorithms. ➢ Engineering Security and Compliance at Scale for AI Workloads (25% of time) Designing and implementing cryptographic controls, including Key Management Service (KMS) integration, encryption-at-rest/transit protocols, and hardware security module (HSM) configurations. Architecting network security perimeters using VPC Service Controls , Privileged Identity Management (PIM), and deep packet inspection logging. Conducting technical root-cause analysis of security vulnerabilities and engineering automated remediation scripts to close compliance gaps (SOC 2, ISO

At Snowflake, we are powering the era of the agentic enterprise. To usher in this new era, we seek AI-native thinkers across every function who are energized by the opportunity to reinvent how they work. You don’t just use tools; you possess an innate curiosity, treating AI as a high-trust collaborator that is core to how you solve problems and accelerate your impact. We look for low-ego individuals who thrive in dynamic and fast-moving environments and move with an experimental mindset — who rapidly test emerging capabilities to discover simpler, more powerful ways to deliver results. At Snowflake, your role isn't just to execute a function, but to help redefine the future of how work gets done. We are hiring a Senior Software Engineer for our Cloud Security team. This team reduces risk to Snowflake at scale through software-defined controls rather than one-off fixes, building the platforms and pipelines that make entire classes of problems go away. You won't just find problems; you'll ship the systems that improve and verify the security posture of Snowflake products across 600+ million assets and three cloud providers (AWS, Azure, and GCP), with a growing focus on using AI to reason over posture data at a scale humans can't. AS A SENIOR SOFTWARE ENGINEER AT SNOWFLAKE, YOU WILL: Build solutions and services that operate, protect, and govern our security posture across 600+ million assets and three clouds (AWS, Azure, GCP). Automate security controls across cloud environments, including core primitives: IAM, detection and monitoring, configuration management, and data protection. Build real-time security monitoring, logging, and alerting, using Snowflake technologies to make Snowflake more secure. Define and maintain security baselines, policies, and standards for public cloud platforms. Design and operate continuous, AI-augmented pipelines that ingest posture and telemetry across hundreds of millions of assets, score risk, and automatically surface the highest-imp

We are looking for an experienced Senior or Staff Engineer for our SRE, InfraSec team, to guide the security of our cloud-based infrastructure. As a Staff SRE, you will be very hands-on technically while also mentoring a small team of SREs. The InfraSec team collaborates closely with other engineering teams to ensure that our infrastructure adheres to the highest security standards. They build essential security infrastructure and implement controls that reinforce the platform’s security posture. This is an SRE team, which means you can expect a highly hands-on approach, tackling the technical challenges of implementing large scale solutions.This team is deeply involved in the technical aspects of security and the nuances of its actual implementation. This role can sit in our New York City, Austin, Seattle or San Francisco offices on a hybrid basis, or it can be fully remote while working from a location based in either Eastern or Central time zones. Responsibilities: Cloud Security Design and Implementation: Help lead the design and deployment of security solutions for cloud platforms (AWS, Azure, GCP), including network and compute security, identity management, and cloud security posture management (CSPM) Automation and Monitoring: Build automated solutions for real-time security monitoring, logging, and alerting in cloud environments. Leverage native cloud services and third-party tools for runtime security monitoring and anomaly detection Security Tooling: Evaluate, implement, and manage cloud-native security tools and platforms for endpoint security, identity management (IAM), and CSPM Qualifications: Experience: 6+ years of experience in SRE, infrastructure engineering or similar role, with a strong focus on security work, with ideally 2+ years in a senior or staff engineering role Security Mindset: A comprehensive understanding of all facets of cloud environment security, spanning from foundational OS networking laye

Project Manager – Identity & Access Management (Entra ID) Location: Dallas, Texas (Hybrid) Practice Area: Technology & Engineering – Cyber Security Employment Type: Full-Time | Permanent About the Team At Capco, we specialize in delivering technology and business consulting solutions to the world's leading financial institutions and energy organizations. Our Cyber Security practice partners with clients to design and implement secure, scalable identity and access management solutions that strengthen resilience, reduce risk, and support regulatory compliance. We're looking for an experienced Project Manager to lead enterprise Identity and Access Management (IAM) initiatives focused on Microsoft Entra ID . This role will drive the successful delivery of strategic identity transformation programs while working closely with business stakeholders, security teams, and technical delivery partners. What You'll Do Lead end-to-end delivery of Microsoft Entra ID implementation and enhancement projects, ensuring successful execution against scope, schedule, budget, and quality objectives. Manage enterprise IAM initiatives including Self-Service Password Reset (SSPR), Single Sign-On (SSO), Conditional Access, and identity lifecycle capabilities. Coordinate cross-functional teams across business, infrastructure, cybersecurity, application development, vendors, and client stakeholders. Develop and maintain project plans, RAID logs, governance reporting, executive status communications, and steering committee materials. Manage project risks, dependencies, change requests, and issue resolution throughout the project lifecycle. Oversee deployment planning, testing, cutover activities, and transition to operational support. Facilitate client workshops, project meetings, and executive presentations while providing delivery leadership and strategic guidance. Partner with cybersecurity and IAM teams to align project delivery with enterprise security strategies, Zero Trust

SpaceX was founded under the belief that a future where humanity is out exploring the stars is fundamentally more exciting than one where we are not. Today, SpaceX is actively developing the technologies to make this possible, with the ultimate goal of making life multiplanetary and expanding consciousness to the stars. SpaceXSI is building Super Intelligence to help humanity understand the universe. Our teams are building the full Super Intelligence stack: from our Colossus supercomputers, to Grok models, to our suite of applications, including Grok Bot, Grok Build, Grok Imagine, Grok Voice, and X. We're creating a powerful flywheel where more compute trains better models, better models power more useful products, and what we learn from people using those products shapes what we build next. ABOUT THE ROLE: We are looking for an Identity and Access Management (IAM) Engineer to play a critical role in designing, implementing, and maturing our enterprise IAM ecosystem. As a Senior IAM Engineer, you will serve as a key subject matter expert (SME) within the broader Information Security organization, driving secure, scalable, and user-friendly identity solutions in a fast-paced, high-growth environment. You will own complex IAM initiatives end-to-end — from strategy and architecture to implementation and optimization — while collaborating closely with Security, Infrastructure, Application, and Engineering teams. This is a high-impact, hands-on role suited for someone who thrives in ambiguity and takes extreme ownership of outcomes. RESPONSIBILITIES: Design and implement enterprise-grade IAM solutions across on-prem, cloud, and SaaS environments. Architect and deliver end-to-end federation strategies using modern protocols (SAML, OIDC, OAuth 2.0, SCIM). Lead integration and optimization of key IAM platforms including SailPoint, Okta, PingOne, Microsoft Entra ID, and other tools. Drive Identity Lifecycle Management (LCM), Role-Based Access Control (RBAC), Privileged Acces

Who We Are Verkada is transforming how organizations protect their people and places with an integrated, privacy-sensitive AI-powered platform that includes solutions for video security, access control, air quality sensors, alarms, intercoms, and visitor management. We’ve got serious momentum in the market: more than 30,000 customers (including 100+ of the Fortune 500), a $5.8B valuation , more than $1 billion in annualized bookings, and backing from CapitalG, Sequoia Capital, General Catalyst, Felicis Ventures, Next47 and more. Physical AI is one of the most consequential technology shifts of our time, and Verkada is at the center of it. You can look at all kinds of communities to see our platform’s impact in the world. It's the retailer that uses our agentic AI to deter theft before it happens. The warehouse that uses AI-powered alerts to make sure its team is protected on the floor with proper PPE. The school that’s alerted to a threat in real-time and triggers a lockdown in seconds, not minutes. We’re rapidly scaling this impact: today, more than 2 million Verkada devices are deployed across 170+ countries. About the Role As a Senior IAM Engineer on the Security team, you will set the standard for identity and access across Verkada, owning how access is defined, granted, reviewed, and revoked throughout our infrastructure. From codifying identity boundaries in Terraform and Rego to driving least privilege across AWS roles and policies on zero trust principles, your work will turn access management from a manual ticket queue into a self-service system powered by scripts and agentic workflows. What You'll Do Manage identity and access infrastructure as code in Terraform, with peer-reviewed change control, drift detection, and policy-as-code. Advance zero trust controls for engineering access: short-lived credentials, just-in-time elevation, and the elimination of standing privilege. Own the access lifecycle for both human and non-human identities: join

Fanatics Commerce is the global leader in licensed sports merchandise, operating a vertically integrated platform that designs, manufactures, and delivers officially licensed apparel, jerseys, headwear, and collectibles for major leagues, teams, and events worldwide. With more than 900 e-commerce sites and a global omnichannel presence across digital, in-venue, and retail, Fanatics Commerce reaches fans in over 180 countries and powers official fan experiences for many of the world's most iconic sports properties. At Fanatics, we bring our BOLD Leadership Principles to life every day - building championship teams, obsessing over fans, acting with entrepreneurial speed, and delivering with a determined and relentless mindset. As we continue to scale our global platform, the IAM Engineer will play a critical role in building scalable, automated identity and access security capabilities across Fanatics Commerce. ROLE OVERVIEW We're looking for an IAM Engineer who places a strong emphasis on usable security and scaling successfully through automation — keeping pace with Fanatics Commerce's rapid growth without disrupting innovation. In this role, you will own the overall strategy, planning, development, and support of Fanatics' IAM solutions and associated processes, providing direction across federation, privileged access management, authentication and authorization, certificate management, and identity provisioning. The IAM Engineer delivers business and fan impact through BOLD leadership and execution excellence, leveraging data, automation, and AI-enabled insights. HOW WILL YOU DRIVE IMPACT Success is measured by the ability to deliver results through BOLD capabilities and measurable outcomes. Team & Leadership Impact (Build Championship Teams) Partner closely with service desk, systems engineering, network security, audit, application developers, and other engineers to design and maintain functional, scalable, and secure IAM operations. Act as the functional te

Reddit is a community of communities. It’s built on shared interests, passion, and trust, and is home to the most open and authentic conversations on the internet. Every day, Reddit users submit, vote, and comment on the topics they care most about. With 100,000+ active communities and approximately 130 million daily active unique visitors, Reddit is one of the internet’s largest sources of information. For more information, visit www.redditinc.com . This is a fully remote role. Reddit has a flexible first workforce. The Identity and Access Management team develops and maintains a set of mission critical, highly performant, and highly scalable systems that manage user identity, authentication, and authorization for all of our millions of daily users and backend services. Some of our present and future challenges include: Building systems around authentication, authorization and identity to meet the needs of Reddit’s engineering organization and millions of daily users. Design, build and ship backend services powering experiences for one of the most visited sites in the world. Work with product management, security, client engineering, and backend teams to define and implement Reddit’s IAM vision and roadmap. As a senior engineer on this team, you’ll be a technical coach and mentor. You’ll draw on your technical expertise to ensure these systems have high uptime and strong performance while working with others to build a roadmap to match the needs of an ever growing engineering organization. In your day-to-day, you will: Steer: Work with the team to select, scope, and drive high leverage projects that align with Reddit’s goals. Build: Execute on a strategy and create a more performant, more scalable, higher quality architecture around authentication, authorization and identity. Amplify: Mentor, coach, and collaborate with other technical contributors Collaborate: Work together with a variety of cross functional teams across Reddit Engineering. Evolve: Lea