Security Engineer, IAM

📋 Description

• Design, deploy, and operate IAM controls across Dropbox’s cloud and on-premises infrastructure
• Design and implement secure identity, authentication, and authorization controls for AI agents and
• Implement least-privilege access using RBAC, ABAC, permission boundaries, service control policies
• Design secure integrations using SAML, OAuth 2.1, OpenID Connect, SCIM, and SPIFFE/SPIRE
• Automate identity lifecycle processes to ensure access is granted, modified, and revoked promptly
• Develop identity guardrails using infrastructure-as-code and policy-as-code

🎯 Requirements

• 5+ years of security engineering experience, including substantial IAM or identity-security
• Hands-on experience with Okta, Okta for AI Agents and Sailpoint, or comparable technologies
• Strong understanding of authentication, authorization, least privilege, zero trust, and identity
• Experience with SAML, OAuth 2.0/2.1, OpenID Connect, SCIM, and MFA
• Experience designing RBAC or ABAC authorization models
• Experience securing human and non-human identities, including services, workloads, automation, and