[All remote jobs](https://jobicy.com/jobs.md)[![Dropbox logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2020/09/WRILS-200923071227-398427.jpg)](https://jobicy.com/company/dropbox.md)[Dropbox](https://jobicy.com/company/dropbox.md) # Security Engineer, IAM AI Summary Dropbox is seeking a senior Security Engineer focused on identity and access management for employees, services, and AI agents. The role designs, deploys, and operates authentication, authorization, identity lifecycle, and least-privilege controls across cloud and on-premises environments. It requires deep experience with IAM platforms, standards such as SAML, OAuth, OpenID Connect, and SCIM, plus automation, infrastructure-as-code, and policy-as-code. The engineer will partner with infrastructure, incident response, and developer platform teams while owning reliable IAM services and participating in on-call rotations.[Apply for this job](#job-application)[View company](https://jobicy.com/company/dropbox.md)ShareRemote from[USA](https://jobicy.com/job-region/usa.md)SalaryUSD 172k–261,900 / yrDepartment[Cybersecurity](https://jobicy.com/categories/cybersecurity.md)EmploymentFull TimeExperienceDirectorPublished12 Nov 2026Apply before12 Dec 2026Listing views44Application actions3Application toolkit ## Make your next move. Prepare your resume, explore your fit, and draft a cover letter for this opportunity. Opportunity details ## About this role. ### Role Description Security Engineers at [Dropbox](https://jobicy.com/company/dropbox.md) safeguard our digital ecosystem alongside a diverse team of professionals dedicated to protecting our products and users. Trusted by millions, our mission is to integrate security seamlessly into Dropbox, empowering confident collaboration. In this role, you’ll build and operate the identity and access controls that help Dropbox employees, services, and AI agents access what they need securely. You’ll combine security engineering and automation to strengthen authentication and authorization, enforce least privilege, and simplify identity lifecycle management across our infrastructure. Working closely with Infrastructure, Corp Engineering, Developer Platform, and Incident Response, you’ll make secure access easier to use and maintain reliable IAM services as Dropbox adopts new AI tools and agentic workflows. Our Engineering Career Framework is [viewable by anyone outside the company](https://dropbox.github.io/dbx-career-framework/) and describes what’s expected for our engineers at each of our career levels. Check out our blog post on this topic and more [here](https://dropbox.tech/culture/sharing-our-engineering-career-framework-with-the-world). ### Responsibilities * Design, deploy, and operate IAM controls across Dropbox’s cloud and on-premises infrastructure * Design and implement secure identity, authentication, and authorization controls for AI agents and other non-human actors * Implement least-privilege access using RBAC, ABAC, permission boundaries, service control policies, and just-in-time access * Design secure integrations using SAML, OAuth 2.1, OpenID Connect, SCIM, and SPIFFE/SPIRE * Automate identity lifecycle processes to ensure access is granted, modified, and revoked promptly * Develop identity guardrails using infrastructure-as-code and policy-as-code * Build monitoring and alerting for anomalous authentication, privilege escalation, credential misuse, and unauthorized access * Partner with Incident Response to investigate identity-related incidents and rapidly revoke compromised access * Conduct security reviews and threat modeling for new identity architectures and integrations * Maintain IAM services with strong reliability, documentation, operational ownership, and on-call support Many teams at Dropbox run Services with on-call rotations, which entails being available for calls during both core and non-core business hours. If a team has an on-call rotation, all engineers on the team are expected to participate in the rotation as part of their employment. Applicants are encouraged to ask for more details of the rotations to which the applicant is applying. ### Requirements * 5+ years of security engineering experience, including substantial IAM or identity-security experience * Hands-on experience with Okta, Okta for AI Agents and Sailpoint, or comparable technologies * Strong understanding of authentication, authorization, least privilege, zero trust, and identity lifecycle management * Experience with SAML, OAuth 2.0/2.1, OpenID Connect, SCIM, and MFA * Experience designing RBAC or ABAC authorization models * Experience securing human and non-human identities, including services, workloads, automation, and CI/CD systems * Experience with agentic frameworks and MCP tool integration * Experience implementing access reviews, privileged-access controls, and joiner/mover/leaver workflows * Proficiency in at least one programming or scripting language, such as Python, Go, Java, Ruby, or Bash * Experience with infrastructure-as-code, policy-as-code, APIs, and security automation * Bachelor’s degree in Computer Science, Information Security, or a related field, or equivalent practical experience ### Preferred Qualifications * Experience with workload identity technologies such as SPIFFE/SPIRE, Kubernetes service accounts, or cloud workload identity. * Experience securing identities and authorization for AI agents and other autonomous systems. * Experience with just-in-time access, zero-standing-privilege, or privileged-access management platforms. * Familiarity with identity threat detection and response. * Experience building IAM controls for multi-account cloud environments. * Familiarity with NIST SP 800-63, NIST SP 800-207, CIS benchmarks, and relevant identity-security guidance. * Experience supporting compliance programs such as SOC 2, ISO 27001, or FedRAMP. * Security certifications such as CISSP, CCSP, or equivalent. * Contributions to the identity or security community through open-source projects, publications, or conferences. ### Durable Skills AI fluency means using these tools to amplify human judgment, not replace it. We believe people with these skills will thrive as work and technology continue to evolve: * Awareness: Understand yourself and others. * Judgment: Evaluate information and make decisions in complex situations. * Adaptability: Learn, adjust, and stay effective through change. * Connection: Communicate, collaborate, and build trust. To learn more about why these skills matter and what the data shows about thriving through change, read this [blog post](https://www.dropbox.jobs/en/our-blog/employee-stories/the-era-of-durable-skills-what-the-data-tells-us-about-thriving-in-change/) from our Chief People Officer, Melanie Rosenwasser. ### Compensation US Zone 1 This role is not available in Zone 1 US Zone 2 $193,500—$261,900 USD US Zone 3 $172,000—$232,800 USD Show more [Apply now >](https://jobicy.com/jobs/161544-security-engineer-iam.md) * ![Upload CV](data:image/svg+xml;base64,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) ### Upload your resume now To unlock remote work opportunities and be discovered by global employers. This job listing has been manually reviewed by the Jobicy Trust & Safety Team for compliance with our posting guidelines, including verification of the company's legitimacy, accuracy of job details, clarity of remote work policy, and absence of misleading or fraudulent content. ## Role DNA A quick view of the complexity, pace, ownership and collaboration implied by the job description. ### Job Complexity 5/5EasyHard ### Pace & Pressure 4/5RelaxedFast-paced ### Autonomy Level 5/5GuidedFull ownership ### Communication Load 4/5IndependentCollaborative AI insightThis is a senior, high-impact security engineering role involving complex identity architectures, AI-agent security, incident response, and production service ownership. Candidates need broad hands-on IAM expertise alongside strong automation and cross-functional design skills. ## Salary analysis Estimated compensation compared with the broader US market for similar roles. Estimated job median (per year)Market rate$216,950US market range (per year)$175k–$270k0$297k AI insightThe yearly pay period is inferred from the job context; it was not explicitly stated by the employer. Dropbox discloses base compensation ranges of $172,000–$232,800 USD for US Zone 3 and $193,500–$261,900 USD for US Zone 2. The posting does not explicitly state a pay cadence, so yearly compensation is inferred from the scale and senior US security-engineering context. The combined displayed range has a midpoint of $216,950 annually; an estimated US market range for a senior IAM Security Engineer is $175,000–$270,000 annually. ## Core skills Skills and capabilities most closely associated with this opportunity. [Identity and Access Management](https://jobicy.com/jobs?search_keywords=Identity%20and%20Access%20Management.md)[Okta](https://jobicy.com/jobs?search_keywords=Okta.md)[SailPoint](https://jobicy.com/jobs?search_keywords=SailPoint.md)[SAML](https://jobicy.com/jobs?search_keywords=SAML.md)[OAuth 2.1](https://jobicy.com/jobs?search_keywords=OAuth%202.1.md)[OpenID Connect](https://jobicy.com/jobs?search_keywords=OpenID%20Connect.md)[SCIM](https://jobicy.com/jobs?search_keywords=SCIM.md)[RBAC](https://jobicy.com/jobs?search_keywords=RBAC.md)[ABAC](https://jobicy.com/jobs?search_keywords=ABAC.md)[Zero Trust](https://jobicy.com/jobs?search_keywords=Zero%20Trust.md)[Infrastructure as Code](https://jobicy.com/jobs?search_keywords=Infrastructure%20as%20Code.md)[Policy as Code](https://jobicy.com/jobs?search_keywords=Policy%20as%20Code.md)[Security Automation](https://jobicy.com/jobs?search_keywords=Security%20Automation.md)[Python](https://jobicy.com/jobs?search_keywords=Python.md)[Incident Response](https://jobicy.com/jobs?search_keywords=Incident%20Response.md) Sample interview questionsHow would you design least-privilege access for both employees and non-human workloads?I would separate human, service, and workload identities; define clear ownership; and use RBAC for stable job functions with ABAC for contextual controls. I would apply short-lived credentials, just-in-time elevation, permission boundaries, periodic access reviews, and automated joiner-mover-leaver workflows to minimize standing privileges. How have you implemented federated authentication using SAML or OpenID Connect? I start by documenting trust boundaries, identity-provider and service-provider responsibilities, claim requirements, session behavior, and failure scenarios. I enforce signed assertions or tokens, strict audience and redirect URI validation, MFA where appropriate, least-privilege group mappings, key rotation, and centralized logging for troubleshooting and detection. What controls would you apply to secure AI agents that invoke internal tools or APIs? Each agent should receive a distinct non-human identity with narrowly scoped, short-lived credentials and explicit authorization policies. I would limit tool permissions, validate delegated user context where relevant, record auditable actions, monitor anomalous behavior, require approval for sensitive operations, and provide rapid credential revocation paths. Describe how you would investigate a suspected credential compromise. I would first contain the risk by disabling or revoking the affected credentials and active sessions, then preserve logs and determine the identity, affected resources, access path, and blast radius. After remediation, I would rotate secrets, correct the underlying control gap, document findings, and improve detection rules or access policies to prevent recurrence. How do infrastructure-as-code and policy-as-code improve IAM security? They make identity controls versioned, reviewable, testable, and consistently deployable across environments. I would use automated policy checks in CI/CD to prevent overly broad permissions, enforce approved patterns, detect drift, and ensure changes have peer review and an auditable deployment history. Next step ## Apply now. Follow the employer’s application method and review Jobicy’s safety guidance before sharing personal information. Keep exploring ## Related remote jobs. * ![Samsara logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2025/06/dd26f5ca-221.jpg) Samsara Nov 12 New ### [Senior Security Engineer – Enterprise Security](https://jobicy.com/jobs/161583-senior-security-engineer-enterprise-security.md) Who we are Samsara (NYSE: IOT) is the pioneer of the Connected Operations™ Cloud, which is a platform that enables organizations that depend on physical operations to harness Internet of… * ![Bogaard Group International logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2026/11/1ccf014fc152-221.webp) Bogaard Group International Nov 12 New ### [Lead Security Systems Solutions Engineer](https://jobicy.com/jobs/161571-lead-security-systems-solutions-engineer.md) Position Overview We are looking for an experienced Lead Security Systems Solutions Engineer to be embedded at a leading global technology and entertainment company. The Lead Security Systems Solutions Engineer… * ![Fleetio logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2023/07/e571b83c37e0ed5371754d319be16e76.jpeg) Fleetio Nov 12 New ### [Senior Security Operations Engineer](https://jobicy.com/jobs/161527-senior-security-operations-engineer-5.md) A little about us…Fleetio is a modern software platform that helps thousands of organizations worldwide manage their fleet operations. Transportation technology is a hot market, and we’re leading the charge… * ![TRM Labs logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2025/06/34aa038c-221.png) TRM Labs Nov 12 New ### [Senior Blockchain Intelligence Analyst, Ransomware](https://jobicy.com/jobs/155136-senior-blockchain-intelligence-analyst-ransomware.md) Build a Safer World. TRM Labs provides AI-powered intelligence solutions that help public and private sector agencies investigate and disrupt crime. TRM’s platforms enable investigators to trace illicit activity, build… * ![Huntress logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2025/06/91eae3ae-221.jpg) Huntress Nov 12 New ### [Security Operations Analyst- Ireland](https://jobicy.com/jobs/155141-security-operations-analyst-ireland.md) What We Do: Cybercrime is growing, and more businesses are getting hit by threats that used to target only the biggest organizations. That pushes defenders like us to operate at… * ![CertiK logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2021/03/Jobicy-210308091023-955845.jpg) CertiK Nov 12 New ### [Blockchain Security Expert – Chain Security Evaluation Track](https://jobicy.com/jobs/152970-blockchain-security-expert-chain-security-evaluation-track.md) About You You’re a self-starter who thrives on tackling the toughest and most meaningful problems, even if they are the most difficult problems. You’re comfortable with the unknown and understand… * ![CertiK logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2021/03/Jobicy-210308091023-955845.jpg) CertiK Nov 12 New ### [Blockchain Security Expert – Anti Defect Track](https://jobicy.com/jobs/152966-blockchain-security-expert-anti-defect-track.md) About the Company Founded in 2018 by professors of Yale University and Columbia University, CertiK is a pioneer in blockchain security, utilizing best-in-class AI technology to secure and monitor blockchain… * ![CertiK logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2021/03/Jobicy-210308091023-955845.jpg) CertiK Nov 12 New ### [Blockchain Security Expert – Security Audit Track](https://jobicy.com/jobs/152975-blockchain-security-expert-security-audit-track.md) About You You’re a self-starter. You believe in tackling the most important problems, even if they are the most difficult problems. You’re comfortable with the unknown and understand that #startuplife… * ![CertiK logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2021/03/Jobicy-210308091023-955845.jpg) CertiK Nov 12 New ### [Blockchain Security Expert Intern – AI Track](https://jobicy.com/jobs/152979-blockchain-security-expert-intern-ai-track.md) About the Company Founded in 2018 by professors of Yale University and Columbia University, CertiK is a pioneer in blockchain security, utilizing best-in-class AI technology to secure and monitor blockchain… * ![Five9 logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2025/08/7c3d754e-221.png) Five9 Nov 12 New ### [Staff Information Security Engineer](https://jobicy.com/jobs/155070-staff-information-security-engineer.md) Join us in bringing joy to customer experience. Five9 is a leading provider of cloud contact center software, bringing the power of cloud innovation to customers worldwide. Living our values… [Browse all jobs](https://jobicy.com/jobs.md)