Hiring: Principal Security Software Engineer, IAM Company: Roblox Location: San Mateo, CA Job Posted Time: 2026-09-10 12:09:30 Employment Type: Full-time / Hybrid Target Skills & Keywords : .NET, ABAC, C#, C++, IAM, Java, LLM, PKI, Python, RBAC, Rust, Service Mesh, Vault, Zero Trust About the job Experience: •8+ years of relevant professional experience building scalable, distributed backend systems, with a track record of driving architecture end to end. Required Skills: •As a Principal Security Software Engineer on the Production IAM team, you will set the technical direction for how identity and access work across Roblox's production infrastructure, from the mTLS-based identity that services use to authenticate to one another, to the privileged access controls that govern how engineers reach production. •As an individual contributor in Production IAM, you will define multi-year strategy, drive alignment across Roblox Platform, mentor senior and staff engineers, and personally build the hardest parts of these systems. •As AI agents become first-class actors in production, you will also help pioneer how they get identity, prove who they are, and receive safely-scoped access. Qualifications: •Deep expertise in identity and access management — authentication, authorization, and access-control models such as RBAC, ABAC, or risk-based access control. •Applied hands-on capability in several of: PKI and certificate/key lifecycle management, mTLS, SPIFFE/SPIRE or comparable workload-identity systems, service mesh, secret management (e.g., Vault), and privileged access management (PAM). •Proficiency in at least one systems language such as Go, Rust, Java, C++, Python, or C# .NET, and a habit of building systems rather than only configuring vendor tools. •AI fluency: you use AI tools in your daily workflow, understand LLM capabilities and limitations, and can reason about what it means to give an AI agent an identity and permissions. •A Bachelor's degree or equivalent experience in Computer Science, Computer Engineering, or a similar technical field. •A systems thinker. You reason about failure modes, blast radius, and reliability, and you design access that stays secure and available even when dependencies fail. •Security-minded and pragmatic. You are passionate about least privilege and zero trust, but you optimize for the Builder experience and adoption, not controls for their own sake. •A force multiplier. You make the engineers and teams around you better through mentorship, clear writing, and high-quality technical leadership. •A strong communicator. You translate deep technical tradeoffs for both engineers and executives, and you build alignment across organizational boundaries. •Bar-raising and hands-on. You still love to build, and you set the standard for engineering quality on the hardest problems. Compensation: •$326,060 - $385,050 / year Interested candidates, please apply directly through the job posting on company's career page or try via AI auto apply on this platform. Don't miss this opportunity to join a forward-thinking team!