Security Engineer, IAM

Security Engineer, IAM at Dropbox responsible for building and operating identity and access controls across cloud and on-premises infrastructure. The role involves designing secure authentication and authorization for AI agents, implementing least-privilege access using RBAC/ABAC, automating identity lifecycle, and integrating with SAML, OAuth, OpenID Connect, SCIM, and SPIFFE/SPIRE. The engineer will also develop monitoring for anomalous activity, conduct security reviews, and maintain IAM on‑

5+ years of security engineering experience with substantial IAM or identity-security focus. Hands-on experience with Okta, Sailpoint, or comparable technologies. Strong understanding of authentication, authorization, least privilege, zero trust, and identity lifecycle management. Experience with SAML, OAuth 2.0/2.1, OpenID Connect, SCIM, and MFA. Experience designing RBAC or ABAC authorization models. Experience securing human and non-human identities. Proficiency in at least one programming or