Security Engineer, IAM
Core
Design, deploy, and operate Identity and Access Management (IAM) controls for Dropbox's cloud and on-premises infrastructure, securing identity and authentication for both human users and non-human actors (AI agents, services, workloads).
Role type
Senior Security Engineer (IAM)
Builds
IAM controls, identity guardrails, monitoring systems, and secure integrations for Dropbox's infrastructure.
Domain
Cloud Security / Identity and Access Management (IAM)
Required skills
IAM design and operations, RBAC/ABAC authorization models, SAML/OAuth/OpenID Connect/SCIM, identity lifecycle management, infrastructure-as-code, policy-as-code, security automation, programming/scripting (Python/Go/Java/Ruby/Bash), incident response collaboration, threat modeling.
Preferred skills
SPIFFE/SPIRE, Kubernetes service accounts, cloud workload identity, AI-agent authorization, just-in-time access, privileged-access management, identity threat detection and response, multi-account cloud environments, NIST/CIS/SOC 2/ISO 27001/FedRAMP standards, CISSP/CCSP certifications.
Technologies
Okta, SailPoint, Python, Go, Java, Ruby, Bash, Kubernetes, SAML, OAuth 2.0/2.1, OpenID Connect, SCIM, SPIFFE/SPIRE, MFA.
Responsibilities
Design and implement least-privilege access controls; automate identity lifecycle management; build monitoring for anomalous authentication; conduct security reviews and threat modeling; partner with Incident Response on identity-related incidents; maintain IAM services with documentation and on-call support.
Seniority
Senior, hands-on IC
