Principal Security Software Engineer, IAM

Roblox
San Mateo
Workplace: OnsiteFull timeUSD 326,060 - 385,050 annuallyFunction: Software EngineeringEducation: bachelorsSkills: ["Systems thinking","Security-minded","Pragmatic","Mentorship","Technical leadership"]

Set the technical direction for Production IAM, defining end-to-end identity and access across machine, workload, human, and AI-agent systems. Own production enforcement for mTLS and SPIFFE/SPIRE-based identity, architect just-in-time least-privilege and break-glass access, and evolve Roblox’s centralized authorization engine using RBAC/ABAC and risk-based models. Lead cross-org design, RFCs, and multi-year roadmaps while mentoring senior and staff engineers and building critical system components.

Loading

Loading job details...

Preparing the role view and application actions.

FursaFursa
Roblox
Roblox
4 hours ago

Principal Security Software Engineer, IAM

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI
Last checked: 3 hours agoStatus: Live

Job Summary

Set the technical direction for Production IAM, defining end-to-end identity and access across machine, workload, human, and AI-agent systems. Own production enforcement for mTLS and SPIFFE/SPIRE-based identity, architect just-in-time least-privilege and break-glass access, and evolve Roblox’s centralized authorization engine using RBAC/ABAC and risk-based models. Lead cross-org design, RFCs, and multi-year roadmaps while mentoring senior and staff engineers and building critical system components.
Location: San Mateo
Workplace: Onsite
Employment Type: Full time
Job Function: Software Engineering
Seniority: Mid level

Key Responsibilities

  • •Lead architecture for production identity and access across machine, workload, human, and AI-agent identity in hybrid on-prem and cloud environments.
  • •Drive production enforcement for mTLS and workload identity using SPIFFE/SPIRE, service-mesh integration, managed service accounts, and certificate issuance/storage/rotation.
  • •Architect and advance just-in-time, least-privilege access and break-glass controls to replace static long-lived credentials.
  • •Evolve the centralized authorization engine and access-control models (RBAC/ABAC and risk-based access) for consistent, fine-grained, testable decisions.
  • •Author RFCs and multi-year roadmaps, align stakeholders, mentor senior/staff engineers, and raise the bar through design review and on-call ownership.

Pay and Benefits

Salary: USD 326,060 - 385,050 annually
Equity and Bonus:Equity

Key Requirements

  • •8+ years building scalable, distributed backend systems and driving architecture end to end.
  • •Deep expertise in identity and access management, including authentication, authorization, and access-control models like RBAC, ABAC, or risk-based access control.
  • •Hands-on experience with systems such as PKI/certificate lifecycle management, mTLS, SPIFFE/SPIRE workload identity, service mesh, secret management (e.g., Vault), and privileged access management (PAM).
  • •Proficiency in at least one systems language such as Go, Rust, Java, C++, Python, or C# .NET; focused on building systems (not just configuring tools).
  • •Experience leading technical work of other engineers through direction-setting, influential design docs, and mentoring, plus a bachelor’s degree in CS/CE or equivalent experience.
Experience:BackendDistributed systemsIdentity and access managementZero trust
Education:Bachelor's in Computer Science, Computer Engineering, or similar technical field
Skills:Systems thinkingSecurity-mindedPragmaticMentorshipTechnical leadership
Tech Stack:MTLSSPIFFESPIREService meshPKICertificate lifecycleVaultPrivileged access managementPAMJust-in-time accessLeast privilegeZero trustRBACABACRisk-based access controlGoRustJavaC++Python

Company Brief

Roblox
Operates an online platform for user-generated games and virtual experiences, enabling creators to build, publish, and monetize interactive 3D experiences for a global community of players.
Industry: Gaming
Company Size: Enterprise (1,001+ employees)
Revenue: USD 1B+
Growth: Public Company
Valuation: Public Company (Market Cap in USD)
Funding: IPO / Publicly Listed
Headquarters: San Mateo, United States
Founded: 2004
WebsiteLinkedIn