Principal Security Software Engineer, Enterprise Security

Overview Roblox is hiring a Principal Security Software Engineer for its Enterprise Security team in San Mateo. The role focuses on building identity, access, and security automation systems for corporate infrastructure. Responsibilities - Design, implement, and own integrations across Roblox's IAM ecosystem, including SSO federation, SCIM provisioning/deprovisioning, OAuth 2.0 authorization servers, and token lifecycle management - Develop production-quality tools and services that enforce security policies at scale and replace manual workflows - Partner with Corporate Engineering, DevOps, Product, and InfoSec to embed security controls into enterprise systems and developer workflows - Assess commercial IAM and security tooling and build the custom integrations and automation layers needed at Roblox's scale Requirements - 10+ years of relevant professional experience combining software engineering and security - Deep understanding of identity and authentication protocols such as OAuth 2.0, SCIM 2.0, SAML 2.0, FIDO2/WebAuthn, Passkeys, and SPIFFE/SPIRE - Experience with policy-as-code or authorization frameworks such as OPA/Rego, Cedar, or Zanzibar/ReBAC - Proficiency in at least one backend or systems language: Python, Go, or Rust - Experience with security-relevant system design including session management, audit logging, rate limiting, and secret storage - Experience in threat modeling for authentication and authorization systems - Understanding of zero trust architecture and least-privilege access patterns Benefits - Eligible for equity compensation - Eligible for benefits as described on the job page - Annual salary range: $385,050 to $443,200 USD for San Mateo-based roles - Office roles are onsite Tuesday, Wednesday, and Thursday, with optional presence on Monday and Friday Source https://careers.roblox.com/jobs/7983905?gh_jid=7983905