Senior Security Software Engineer, Roblox

• Familiarity with OPA, Topaz, SPIFFE/SPIRE: You are familiar with open policy agent (OPA), Topaz, and the SPIFFE/SPIRE framework and similar technologies used for policy enforcement, workload attestation, and identity federation in cloud-native environments
• Experience with Public Key Infrastructure (PKI): You have hands-on experience with the design, implementation, and maintenance of PKI solutions
• Experience with Privileged Access Management (PAM): You have hands-on experience implementing and maintaining PAM solutions to control, monitor, and audit privileged access within production environments, demonstrating your ability to mitigate the risk of unauthorized access or misuse
• Proficiency in diverse access control models, including Role-Based (RBAC), Attribute-Based (ABAC), and Risk-Based Access Control systems!
• 4+ years of relevant professional experience in building scalable, available, distributed backend applications!
• Proficiency with at least one object oriented programming language (Python, Java, Go C++, C# .NET)
• Knowledge of REST API, design patterns, and scalable containerized systems and microservices
• Experience mentoring as well as leading the work of junior engineers

Desirable

• As a Senior Security Software Engineer on the Identity and Access Management team at Roblox, your primary responsibility will be to refine and implement automation around identity lifecycle and access management
• Your efforts will directly impact the security and operational efficiency of our most sensitive systems, ensuring reliable access for employees, contractors, and Business Process Outsourcing (BPO) partners
• This role is crucial for the continuous improvement and management of our specific access control and identity management strategies
• This is a hybrid in-office role and you will report directly to the Engineering Manager leading our Identity and Access Management team
• Tackle complex access management challenges at scale, ensuring a secure, efficient, and user-friendly access environment for our workforce
• Lead the design, development, and maintenance of highly available access management solutions
• Lead access rightsizing initiatives, ensuring our workforce have precisely the access they need—no more, no less—to secure and optimize operations
• Implement scalable identity lifecycle management that automates away manual toil for onboarding and offboarding
• Have the independence, opportunity and the end-to-end responsibility to develop security services within the Roblox infrastructure ecosystem