2 months ago
San Mateo, CA, USAStaff+
Base Salary
$326k - $385k/yr
Responsibilities
- Set the architecture and multi-year technical direction for machine, workload, human, and AI-agent identity across Roblox’s hybrid infrastructure.
- Drive SPIFFE/SPIRE-based workload identity, mTLS, service-mesh integration, managed service accounts, and certificate issuance, storage, and rotation into production enforcement.
- Architect just-in-time, least-privilege, break-glass, short-lived, and auditable production access for engineers.
- Evolve the centralized authorization engine and RBAC, ABAC, and risk-based access models for consistent, fine-grained, and testable decisions.
- Define identity, credentials, scoped permissions, and session management patterns for AI agents.
- Author RFCs and roadmaps, align stakeholders across Roblox Platform, mentor senior and staff engineers, and contribute to design review, on-call ownership, and hiring.
- Personally build the most difficult parts of the identity and access systems.
Requirements
- 8+ years of relevant professional experience building scalable, distributed backend systems and driving architecture end to end.
- Deep expertise in identity and access management, including authentication, authorization, RBAC, ABAC, or risk-based access control.
- Hands-on experience with several of PKI and certificate/key lifecycle management, mTLS, SPIFFE/SPIRE or comparable workload-identity systems, service mesh, secret management such as Vault, and privileged access management.
- Proficiency in at least one systems language, including Go, Rust, Java, C++, Python, or C# .NET, with experience building systems rather than only configuring vendor tools.
- Experience leading technical work across engineers, setting direction across teams, writing influential design documents, and mentoring senior talent.
- AI fluency, including familiarity with AI tools, LLM capabilities and limitations, and identity and permissions for AI agents.
- Bachelor’s degree or equivalent experience in Computer Science, Computer Engineering, or a similar technical field.
- Strong systems thinking, security-minded pragmatism, communication, mentorship, and hands-on technical leadership.
Benefits
- Equity compensation and employee benefits are available to full-time employees.
- Office-based roles are onsite Tuesday, Wednesday, and Thursday, with optional presence Monday and Friday.
- The role is based at Roblox headquarters in San Mateo, California, when applicable.
- Reasonable accommodations are available during the recruiting process for qualifying disabilities or religious beliefs.
About Roblox
Roblox builds a platform for user‑generated 3D experiences, offering Roblox Studio for creators and a social marketplace where players explore and interact across devices. Its business model centers on virtual currency (Robux) and subscriptions, platform fees paid to creators, and an expanding advertising offering. Founded in 2004 and headquartered in San Mateo, California, Roblox Corporation is publicly traded on the NYSE under the ticker RBLX.