Senior Systems Engineer, Identity & Access Management

The role

You will design and build high-throughput, low-latency IAM capabilities for customer-facing and internal service APIs. You will work on authentication and authorization systems including login, SSO, OAuth, and API tokens.

What you will do

• Design and build high-throughput, low-latency IAM capabilities.
• Contribute to the design and evolution of authentication and authorization systems.
• Translate product and security requirements into APIs and technical specifications.
• Maintain engineering excellence through code reviews and technical design documents.
• Own the reliability and observability of the platform under constant load.
• Use AI tools throughout the workflow for code generation and debugging.

Required qualifications

• 5-8 years building and operating production systems at scale.
• Working knowledge of identity protocols and models (OAuth 2.0, OIDC, SAML, SCIM, RBAC/ABAC, and session management, etc.).
• Hands-on experience implementing identity protocols or fine-grained authorization systems, RBAC, ABAC, relationship-based access control, or policy engines (such as Cedar), in production.
• Proficiency in languages like Go and Typescript.
• Experience designing and building REST APIs: routing, authentication, request lifecycle, and versioning.
• PostgreSQL and Redis experience: schema design, query optimization, caching strategies, and consistency tradeoffs.
• Strong distributed systems intuition: consistency models, event-driven replication, and the implications of global state propagation.
• High standards for correctness and security.
• Curious, self-directed, and comfortable driving ambiguous problems to resolution across team boundaries.

Nice to have

• Experience with credential and token lifecycle systems: issuance, rotation, scoping, revocation, or service-to-service authentication at scale.
• Familiarity with the Cloudflare developer platform: Workers, Durable Objects, KV, R2, etc.
• Experience incrementally re-architecting a large, long-lived codebase under production traffic.
• Familiarity with containerized deployment (Docker, Kubernetes), infrastructure as code (Terraform), and observability tooling (Prometheus, Grafana, Kibana).

Benefits

• Medical/Rx Insurance
• Dental Insurance
• Vision Insurance
• Flexible Spending Accounts
• Commuter Spending Accounts
• Fertility & Family Forming Benefits
• On-demand mental health support and Employee Assistance Program
• Global Travel Medical Insurance
• Short and Long Term Disability Insurance
• Life & Accident Insurance
• 401(k) Retirement Savings Plan
• Employee Stock Participation Plan

Before you apply

• Applicants who progress to the offer stage may be asked to attend an in-person interview within one of the Cloudflare Offices or Cloudflare Hubs.
• Offer of employment may be conditioned on authorization to receive software or technology controlled under U.S. export laws without sponsorship for an export license.

About the company

Cloudflare runs one of the world’s largest networks that powers millions of websites and other Internet properties. The company is on a mission to help build a better Internet.