Senior Security Software Engineer (IAM)

Join Roblox as a Senior Security Software Engineer on the IAM team. You'll be responsible for building the next generation of identity and access management, designing tooling and policy for AI agents, and evolving workload authentication and privileged access management. Your work will directly impact the security posture of our production environment and set the standard for agentic IAM across the industry.

• Design and implement scalable Identity and Access Management (IAM) solutions for both human and AI agents in a hybrid production environment.
• Develop robust authentication and authorization mechanisms for workloads and services accessing production environments, enforcing least privilege and secure access controls.
• Establish a streamlined, secure "golden path" framework that empowers developers to build tools and services with appropriate IAM controls baked in by default.
• Experience with Privileged Access Management (PAM) — implementing or maintaining PAM solutions to control, monitor, and audit privileged access within production environments
• Familiarity with access control models such as Role-Based (RBAC), Attribute-Based (ABAC), or Risk-Based Access Control
• Experience mentoring or leading the technical work of other engineers
• Familiarity with policy and identity frameworks like OPA, Topaz, SPIFFE/SPIRE, or similar technologies used for policy enforcement, workload attestation, and identity federation in cloud-native environments
• Proficiency in at least one programming language such as Python, Java, Go, C++, or C# .NET
• 4+ years of relevant professional experience building scalable, distributed backend applications
• AI fluency: You actively use AI tools in your daily workflow, understand LLM capabilities and limitations, and can reason about what it means to give an AI agent an identity and permissions
• Knowledge of REST APIs, design patterns, and scalable containerized systems and microservices
• Experience with Public Key Infrastructure (PKI) — design, implementation, or maintenance of PKI solutions