About the company
At Cloudflare, we are on a mission to help build a better Internet. Today the company runs one of the world’s largest networks that powers millions of websites and other Internet properties for customers ranging from individual bloggers to SMBs to Fortune 500 companies.
Responsibilities
- Design, build, test, and deploy IAM solutions across authentication, authorization, and accounting
- Leverage Cloudflare products to secure our identities
- Build SSO integrations leveraging SAML, OIDC, OAuth, and SCIM
- Build and manage the Identity Governance and Administration platform
- Develop automated roles leveraging RBAC and ABAC
- Build and manage an access certification platform
- Build and manage a Privileged Access Management (PAM) platform
- Provide operational support of IAM systems including an on-call rotation that may include after hours calls
Requirements
- Strong understanding of identity federation (SAML, OAuth, OpenID Connect, etc.)
- Experience implementing Identity Governance and Administration (IGA) solutions including lifecycle management, SCIM, birthright access (RBAC, ABAC), and access certifications
- Demonstrated ability to build production-grade automation scripts and tools. Must possess hands-on engineering experience leveraging AI/LLMs to solve operational or technical challenges.
- Experience with secure configuration of containerized application platforms (e.g. Kubernetes)
- Advanced scripting experience (Python, TypeScript, Bash, etc.)
- Experience implementing Zero Trust controls
- Experience integrating with applications and SaaS solutions
- Experience with Identity and Access Management policy application and enforcement
- Experience working with Identity Threat Detection & Response (ITDR)
- Experience working with infrastructure as code and configuration management tools like Terraform, Ansible, etc.
Conditions