Principal Security Software Engineer, IAM
Core
Define multi-year strategy and architecture for production identity and access across machine, workload, human, and AI-agent identities for Roblox's hybrid infrastructure.
Role type
Principal Security Software Engineer (IAM)
Builds
Machine and workload identity platform, centralized authorization engine, production access management platform, PKI/certificate lifecycle, and just-in-time privileged access systems.
Domain
Cybersecurity, Identity and Access Management (IAM), Cloud Infrastructure
Required skills
Distributed backend systems architecture, Identity and Access Management (IAM), PKI and certificate lifecycle management, mTLS, SPIFFE/SPIRE, Service mesh, Secret management, Privileged access management (PAM), Systems programming (Go/Rust/Java/C++/Python/C#), Technical leadership and mentorship, AI agent identity patterns
Preferred skills
AI fluency and LLM reasoning, Zero trust architecture, Risk-based access control
Technologies
SPIFFE, SPIRE, Vault, Service mesh, mTLS
Responsibilities
Lead architecture for production identity and access across hybrid on-prem and cloud fleets; Drive mTLS and workload identity to full production enforcement; Architect just-in-time, least-privilege, and break-glass access; Evolve the centralized authorization engine (RBAC/ABAC); Pioneer identity and access patterns for AI agents; Lead across the org via RFCs, roadmaps, design reviews, and hiring.
Seniority
Principal, hands-on IC with strategy & mentorship
