Principal Security Software Engineer, IAM
Core
Define multi-year strategy and architecture for production identity and access across machine, workload, human, and AI-agent identities for Roblox's hybrid infrastructure.
Role type
Principal Security Software Engineer (IAM)
Builds
Machine and workload identity platform, centralized authorization engine, production access management platform, PKI/certificate lifecycle, and just-in-time privileged access systems.
Domain
Cybersecurity, Identity and Access Management (IAM), Cloud Infrastructure
Deliverable
production ML models | product features | infrastructure
Required skills
Distributed backend systems architecture, Identity and Access Management (IAM), PKI and certificate lifecycle management, mTLS, SPIFFE/SPIRE, Service mesh, Secret management, Privileged access management (PAM), Systems programming (Go/Rust/Java/C++/Python/C#), Technical leadership and mentorship, AI agent identity patterns
Preferred skills
AI fluency and LLM reasoning, Zero trust architecture, Risk-based access control
Technologies
SPIFFE, SPIRE, Vault, Service mesh, mTLS
Responsibilities
Lead architecture for production identity and access across hybrid on-prem and cloud fleets; Drive mTLS and workload identity to full production enforcement; Architect just-in-time, least-privilege, and break-glass access; Evolve the centralized authorization engine (RBAC/ABAC); Pioneer identity and access patterns for AI agents; Lead across the org via RFCs, roadmaps, design reviews, and hiring.
Seniority
Principal, hands-on IC with strategy & mentorship