Senior Security Software Engineer, IAM

About the Role

As a Senior Security Software Engineer on the IAM team at Roblox, you'll build the next generation of identity and access management — defining how both humans and AI agents get identity, authenticate, and receive access to Roblox's production infrastructure. As AI agents become first-class actors in our systems, you'll design the tooling and policy that governs what they can do, how they prove who they are, and how we keep that access safe at scale. You'll also continue to evolve workload authentication, privileged access management, and secure "golden path" for developers.

Responsibilities

• Design Identity and Access for AI Agents: Define how AI agents get credentials, receive scoped permissions, and have their sessions managed throughout their lifecycle.
• Engineer Hybrid Production IAM at Scale: Design and implement scalable IAM solutions for Roblox's hybrid production environment across on-premises and cloud infrastructure.
• Develop and Manage Workload Authentication & Authorization: Build robust authentication and authorization mechanisms for workloads and services accessing production environments, enforcing least privilege and secure access controls.
• Establish the Secure Golden Path for Development: Develop and maintain a streamlined, secure "golden path" framework empowering developers to build tools and services with IAM controls baked in by default.
• Take end-to-end responsibility to develop security services within the Roblox infrastructure ecosystem.

Qualifications

• 4+ years of relevant professional experience building scalable, distributed backend applications.
• Proficiency in at least one programming language such as Python, Java, Go, C++, or C# .NET.
• AI fluency: Actively use AI tools in daily workflow, understand LLM capabilities and limitations, and reason about AI agent identities and permissions.
• Knowledge of REST APIs, design patterns, and scalable containerized systems and microservices.
• Experience mentoring or leading the technical work of other engineers.
• Familiarity with policy and identity frameworks like OPA, Topaz, SPIFFE/SPIRE, or similar technologies used for policy enforcement, workload attestation, and identity federation.
• Experience with Public Key Infrastructure (PKI) design, implementation, or maintenance.
• Experience with Privileged Access Management (PAM) solutions to control, monitor, and audit privileged access.
• Familiarity with access control models such as RBAC, ABAC, or Risk-Based Access Control.