Job Description
Qualifications
Familiarity with OPA, Topaz, SPIFFE/SPIRE: You are familiar with open policy agent (OPA), Topaz, and the SPIFFE/SPIRE framework and similar technologies used for policy enforcement, workload attestation, and identity federation in cloud-native environments
Experience with Public Key Infrastructure (PKI): You have hands-on experience with the design, implementation, and maintenance of PKI solutions
Experience with Privileged Access Management (PAM): You have hands-on experience implementing and maintaining PAM solutions to control, monitor, and audit privileged access within production environments, demonstrating your ability to mitigate the risk of unauthorized access or misuse
Proficiency in diverse access control models, including Role-Based (RBAC), Attribute-Based (ABAC), and Risk-Based Access Control systems!
4+ years of relevant professional experience in building scalable, available, distributed backend applications!
Proficiency with at least one object oriented programming language (Python, Java, Go C++, C# .NET)
Knowledge of REST API, design patterns, and scalable containerized systems and microservices
Experience mentoring as well as leading the work of junior engineers
A great technical leader: You have experience with leading the technical work to deliver automation
Team-oriented: a collaborative team player who enjoys working with others
Passionate about security: You have experience with security, or you are curious about it and you are willing to learn and grow
Benefits
The actual base pay is dependent upon a variety of job-related factors such as professional background, training, work experience, location, business needs and market demand
Therefore, in some circumstances, the actual salary could fall outside of this expected range
This pay range is subject to change and may be modified in the future
All full-time employees are also eligible for equity compensation and for benefits
Annual Salary Range
$208,260—$258,720 USD
Industry-leading compensation package
Excellent medical, dental, and vision coverage
A rewarding 401k program
Flexible vacation policy (varies by exemption status)
Roflex - Flexible and supportive work policy
Roblox Admin badge for your avatar
Free catered lunches five times a week and several fully stocked kitchens with unlimited snacks
Onsite fitness center and fitness program credit
Annual CalTrain Go Pass
Responsibilities
You'll engineer scalable systems for workload authentication and authorization, manage privileged access, and establish a secure "golden path" for developers
Your work will directly impact the security posture of our entire production environment, ensuring that only authorized workloads and individuals have access to sensitive resources
This role is essential for mitigating security risks, maintaining compliance, and fostering a culture of security throughout Roblox's engineering organization
Engineer Hybrid Production IAM at Scale: You will design and implement scalable IAM solutions specifically tailored for Roblox's hybrid production environment, encompassing both on-premises and cloud infrastructure, ensuring secure and efficient access for workloads and services across the entire ecosystem
Develop and Manage Workload Authentication & Authorization: You will develop and manage robust authentication and authorization mechanisms specifically for workloads and services accessing Roblox's production environments, ensuring least privilege and adherence to secure access controls
Establish the Secure Golden Path for Development: You will develop and maintain a streamlined, secure "golden path" framework that empowers Roblox developers to easily build tools and services with appropriate IAM controls baked in by default, ensuring security is seamlessly integrated into the development lifecycle
Have the independence, opportunity and the end-to-end responsibility to develop security services within the Roblox infrastructure ecosystem
Job description
Every day, tens of millions of people come to Roblox to explore, create, play, learn, and connect with friends in 3D immersive digital experiences– all created by our global community of developers and creators.
At Roblox, we’re building the tools and platform that empower our community to bring any experience that they can imagine to life. Our vision is to reimagine the way people come together, from anywhere in the world, and on any device. We’re on a mission to connect a billion people with optimism and civility, and looking for amazing talent to help us get there.
A career at Roblox means you’ll be working to shape the future of human interaction, solving unique technical challenges at scale, and helping to create safer, more civil shared experiences for everyone.
As a Senior Security Software Engineer on the Identity and Access Management (IAM) team at Roblox, your primary responsibility will be to design and implement robust IAM solutions that safeguard our critical production infrastructure. You'll engineer scalable systems for workload authentication and authorization, manage privileged access, and establish a secure "golden path" for developers. Your work will directly impact the security posture of our entire production environment, ensuring that only authorized workloads and individuals have access to sensitive resources. This role is essential for mitigating security risks, maintaining compliance, and fostering a culture of security throughout Roblox's engineering organization.
You Will
• Engineer Hybrid Production IAM at Scale: You will design and implement scalable IAM solutions specifically tailored for Roblox's hybrid production environment, encompassing both on-premises and cloud infrastructure, ensuring secure and efficient access for workloads and services across the entire ecosystem.
• Develop and Manage Workload Authentication & Authorization: You will develop and manage robust authentication and authorization mechanisms specifically for workloads and services accessing Roblox's production environments, ensuring least privilege and adherence to secure access controls.
• Establish the Secure Golden Path for Development: You will develop and maintain a streamlined, secure "golden path" framework that empowers Roblox developers to easily build tools and services with appropriate IAM controls baked in by default, ensuring security is seamlessly integrated into the development lifecycle.
• Have the independence, opportunity and the end-to-end responsibility to develop security services within the Roblox infrastructure ecosystem.
You Have
• Familiarity with OPA, Topaz, SPIFFE/SPIRE: You are familiar with open policy agent (OPA), Topaz, and the SPIFFE/SPIRE framework and similar technologies used for policy enforcement, workload attestation, and identity federation in cloud-native environments.
• Experience with Public Key Infrastructure (PKI): You have hands-on experience with the design, implementation, and maintenance of PKI solutions.
• Experience with Privileged Access Management (PAM): You have hands-on experience implementing and maintaining PAM solutions to control, monitor, and audit privileged access within production environments, demonstrating your ability to mitigate the risk of unauthorized access or misuse.
• Proficiency in diverse access control models, including Role-Based (RBAC), Attribute-Based (ABAC), and Risk-Based Access Control systems!
• 4+ years of relevant professional experience in building scalable, available, distributed backend applications!
• Proficiency with at least one object oriented programming language (Python, Java, Go C++, C# .NET).
• Knowledge of REST API, design patterns, and scalable containerized systems and microservices.
• Experience mentoring as well as leading the work of junior engineers.
You Are
• A great technical leader: You have experience with leading the technical work to deliver automation.
• Team-oriented: a collaborative team player who enjoys working with others.
• Passionate about security: You have experience with security, or you are curious about it and you are willing to learn and grow.
For roles that are based at our headquarters in San Mateo, CA: The starting base pay for this position is as shown below. The actual base pay is dependent upon a variety of job-related factors such as professional background, training, work experience, location, business needs and market demand. Therefore, in some circumstances, the actual salary could fall outside of this expected range. This pay range is subject to change and may be modified in the future. All full-time employees are also eligible for equity compensation and for benefits.
Annual Salary Range
$208,260—$258,720 USD
Roles that are based in our San Mateo, CA Headquarters are in-office Tuesday, Wednesday, and Thursday, with optional in-office on Monday and Friday (unless otherwise noted).
You’ll Love
• Industry-leading compensation package
• Excellent medical, dental, and vision coverage
• A rewarding 401k program
• Flexible vacation policy (varies by exemption status)
• Roflex - Flexible and supportive work policy
• Roblox Admin badge for your avatar
• At Roblox HQ:
• Free catered lunches five times a week and several fully stocked kitchens with unlimited snacks
• Onsite fitness center and fitness program credit
• Annual CalTrain Go Pass
Roblox provides equal employment opportunities to all employees and applicants for employment and prohibits discrimination and harassment of any type without regard to race, color, religion, age, sex, national origin, disability status, genetics, protected veteran status, ****** orientation, gender identity or expression, or any other characteristic protected by federal, state or local laws. Roblox also provides reasonable accommodations for all candidates during the interview process.
Familiarity with OPA, Topaz, SPIFFE/SPIRE: You are familiar with open policy agent (OPA), Topaz, and the SPIFFE/SPIRE framework and similar technologies used for policy enforcement, workload attestation, and identity federation in cloud-native environments
Experience with Public Key Infrastructure (PKI): You have hands-on experience with the design, implementation, and maintenance of PKI solutions
Experience with Privileged Access Management (PAM): You have hands-on experience implementing and maintaining PAM solutions to control, monitor, and audit privileged access within production environments, demonstrating your ability to mitigate the risk of unauthorized access or misuse
Proficiency in diverse access control models, including Role-Based (RBAC), Attribute-Based (ABAC), and Risk-Based Access Control systems!
4+ years of relevant professional experience in building scalable, available, distributed backend applications!
Proficiency with at least one object oriented programming language (Python, Java, Go C++, C# .NET)
Knowledge of REST API, design patterns, and scalable containerized systems and microservices
Experience mentoring as well as leading the work of junior engineers
A great technical leader: You have experience with leading the technical work to deliver automation
Team-oriented: a collaborative team player who enjoys working with others
Passionate about security: You have experience with security, or you are curious about it and you are willing to learn and grow
Benefits
The actual base pay is dependent upon a variety of job-related factors such as professional background, training, work experience, location, business needs and market demand
Therefore, in some circumstances, the actual salary could fall outside of this expected range
This pay range is subject to change and may be modified in the future
All full-time employees are also eligible for equity compensation and for benefits
Annual Salary Range
$208,260—$258,720 USD
Industry-leading compensation package
Excellent medical, dental, and vision coverage
A rewarding 401k program
Flexible vacation policy (varies by exemption status)
Roflex - Flexible and supportive work policy
Roblox Admin badge for your avatar
Free catered lunches five times a week and several fully stocked kitchens with unlimited snacks
Onsite fitness center and fitness program credit
Annual CalTrain Go Pass
Responsibilities
You'll engineer scalable systems for workload authentication and authorization, manage privileged access, and establish a secure "golden path" for developers
Your work will directly impact the security posture of our entire production environment, ensuring that only authorized workloads and individuals have access to sensitive resources
This role is essential for mitigating security risks, maintaining compliance, and fostering a culture of security throughout Roblox's engineering organization
Engineer Hybrid Production IAM at Scale: You will design and implement scalable IAM solutions specifically tailored for Roblox's hybrid production environment, encompassing both on-premises and cloud infrastructure, ensuring secure and efficient access for workloads and services across the entire ecosystem
Develop and Manage Workload Authentication & Authorization: You will develop and manage robust authentication and authorization mechanisms specifically for workloads and services accessing Roblox's production environments, ensuring least privilege and adherence to secure access controls
Establish the Secure Golden Path for Development: You will develop and maintain a streamlined, secure "golden path" framework that empowers Roblox developers to easily build tools and services with appropriate IAM controls baked in by default, ensuring security is seamlessly integrated into the development lifecycle
Have the independence, opportunity and the end-to-end responsibility to develop security services within the Roblox infrastructure ecosystem
Job description
Every day, tens of millions of people come to Roblox to explore, create, play, learn, and connect with friends in 3D immersive digital experiences– all created by our global community of developers and creators.
At Roblox, we’re building the tools and platform that empower our community to bring any experience that they can imagine to life. Our vision is to reimagine the way people come together, from anywhere in the world, and on any device. We’re on a mission to connect a billion people with optimism and civility, and looking for amazing talent to help us get there.
A career at Roblox means you’ll be working to shape the future of human interaction, solving unique technical challenges at scale, and helping to create safer, more civil shared experiences for everyone.
As a Senior Security Software Engineer on the Identity and Access Management (IAM) team at Roblox, your primary responsibility will be to design and implement robust IAM solutions that safeguard our critical production infrastructure. You'll engineer scalable systems for workload authentication and authorization, manage privileged access, and establish a secure "golden path" for developers. Your work will directly impact the security posture of our entire production environment, ensuring that only authorized workloads and individuals have access to sensitive resources. This role is essential for mitigating security risks, maintaining compliance, and fostering a culture of security throughout Roblox's engineering organization.
You Will
• Engineer Hybrid Production IAM at Scale: You will design and implement scalable IAM solutions specifically tailored for Roblox's hybrid production environment, encompassing both on-premises and cloud infrastructure, ensuring secure and efficient access for workloads and services across the entire ecosystem.
• Develop and Manage Workload Authentication & Authorization: You will develop and manage robust authentication and authorization mechanisms specifically for workloads and services accessing Roblox's production environments, ensuring least privilege and adherence to secure access controls.
• Establish the Secure Golden Path for Development: You will develop and maintain a streamlined, secure "golden path" framework that empowers Roblox developers to easily build tools and services with appropriate IAM controls baked in by default, ensuring security is seamlessly integrated into the development lifecycle.
• Have the independence, opportunity and the end-to-end responsibility to develop security services within the Roblox infrastructure ecosystem.
You Have
• Familiarity with OPA, Topaz, SPIFFE/SPIRE: You are familiar with open policy agent (OPA), Topaz, and the SPIFFE/SPIRE framework and similar technologies used for policy enforcement, workload attestation, and identity federation in cloud-native environments.
• Experience with Public Key Infrastructure (PKI): You have hands-on experience with the design, implementation, and maintenance of PKI solutions.
• Experience with Privileged Access Management (PAM): You have hands-on experience implementing and maintaining PAM solutions to control, monitor, and audit privileged access within production environments, demonstrating your ability to mitigate the risk of unauthorized access or misuse.
• Proficiency in diverse access control models, including Role-Based (RBAC), Attribute-Based (ABAC), and Risk-Based Access Control systems!
• 4+ years of relevant professional experience in building scalable, available, distributed backend applications!
• Proficiency with at least one object oriented programming language (Python, Java, Go C++, C# .NET).
• Knowledge of REST API, design patterns, and scalable containerized systems and microservices.
• Experience mentoring as well as leading the work of junior engineers.
You Are
• A great technical leader: You have experience with leading the technical work to deliver automation.
• Team-oriented: a collaborative team player who enjoys working with others.
• Passionate about security: You have experience with security, or you are curious about it and you are willing to learn and grow.
For roles that are based at our headquarters in San Mateo, CA: The starting base pay for this position is as shown below. The actual base pay is dependent upon a variety of job-related factors such as professional background, training, work experience, location, business needs and market demand. Therefore, in some circumstances, the actual salary could fall outside of this expected range. This pay range is subject to change and may be modified in the future. All full-time employees are also eligible for equity compensation and for benefits.
Annual Salary Range
$208,260—$258,720 USD
Roles that are based in our San Mateo, CA Headquarters are in-office Tuesday, Wednesday, and Thursday, with optional in-office on Monday and Friday (unless otherwise noted).
You’ll Love
• Industry-leading compensation package
• Excellent medical, dental, and vision coverage
• A rewarding 401k program
• Flexible vacation policy (varies by exemption status)
• Roflex - Flexible and supportive work policy
• Roblox Admin badge for your avatar
• At Roblox HQ:
• Free catered lunches five times a week and several fully stocked kitchens with unlimited snacks
• Onsite fitness center and fitness program credit
• Annual CalTrain Go Pass
Roblox provides equal employment opportunities to all employees and applicants for employment and prohibits discrimination and harassment of any type without regard to race, color, religion, age, sex, national origin, disability status, genetics, protected veteran status, ****** orientation, gender identity or expression, or any other characteristic protected by federal, state or local laws. Roblox also provides reasonable accommodations for all candidates during the interview process.
💡 Quick Summary
Seeking a career-building opportunity? The Senior Security Software Engineer| Identity and Access Management position is now open for candidates interested in the Software Developer Jobs sector. This role in San Mateo offers a professional environment and growth potential.
Requirement Snapshot: Candidates should possess basic communication skills, a proactive attitude, and the ability to work in a team. Experience in Software Developer Jobs is a plus.
