Design identity and access management for both humans and AI agents across Roblox's hybrid production infrastructure

Roblox's IAM team is hiring a Senior Security Software Engineer to build next-generation identity and access management, with a distinctive emphasis on defining how AI agents get credentials, scoped permissions, and session lifecycle management as first-class actors in production. The role spans workload authentication/authorization, PKI, PAM, and a secure 'golden path' framework for developers across on-prem and cloud infrastructure. Expect questions probing both classical IAM depth (RBAC/ABAC, PKI, SPIFFE/SPIRE-style workload identity) and genuinely novel reasoning about agentic identity design.

Step into this interview

Free · a live voice mock calibrated to this exact role

Practice this interview

What this interview tests

Designing identity, scoped permissions, and session lifecycle for AI agents as production actors
Workload authentication/authorization at scale across hybrid (on-prem + cloud) infrastructure
PKI design/implementation and PAM for privileged, auditable access
Policy and identity frameworks: OPA, Topaz, SPIFFE/SPIRE, workload attestation
Access control models: RBAC vs ABAC vs risk-based, and least-privilege tradeoffs
Building a secure 'golden path' that developers actually adopt