About the company
Roblox is building the tools and platform that empower a global community of developers and creators to bring immersive 3D experiences to life, connecting a billion people worldwide.
Responsibilities
- Lead the architecture for production identity and access across hybrid on-prem and cloud fleet
- Drive mTLS and workload identity to full production enforcement, including SPIFFE/SPIRE-based identity platform and service-mesh integration
- Architect just-in-time, least-privilege, and break-glass access to production
- Mature the centralized authorization engine and access-control models (RBAC/ABAC and risk-based access)
- Pioneer identity and access for AI agents
- Author RFCs and multi-year roadmaps, mentor senior and staff engineers
Requirements
- 8+ years of relevant professional experience building scalable, distributed backend systems
- Deep expertise in identity and access management — authentication, authorization, and access-control models such as RBAC, ABAC, or risk-based access control
- Hands-on experience with PKI and certificate/key lifecycle management, mTLS, SPIFFE/SPIRE, service mesh, secret management (e.g., Vault), and privileged access management (PAM)
- Proficiency in at least one systems language such as Go, Rust, Java, C++, Python, or C# .NET
- Experience leading the technical work of other engineers
- AI fluency: use of AI tools, understanding of LLM capabilities and limitations
- Bachelor's degree or equivalent experience in Computer Science, Computer Engineering, or a similar technical field
Conditions
- Based at headquarters in San Mateo, CA
- Office roles are onsite Tuesday, Wednesday, and Thursday, with optional presence on Monday and Friday
- Full-time employees are eligible for equity compensation and benefits