Security Engineer, Iam

Dropbox is a Virtual First company. For this role, we are currently only authorized to hire candidates from the following provinces: Alberta, British Columbia, Ontario, and Saskatchewan.Role Description
Security Engineers at Dropbox safeguard our digital ecosystem alongside a diverse team of professionals dedicated to protecting our products and users. Trusted by millions, our mission is to integrate security seamlessly into Dropbox, empowering confident collaboration.In this role, you’ll build and operate the identity and access controls that help Dropbox employees, services, and AI agents access what they need securely. You’ll combine security engineering and automation to strengthen authentication and authorization, enforce least privilege, and simplify identity lifecycle management across our infrastructure. Working closely with Infrastructure, Corp Engineering, Developer Platform, and Incident Response, you’ll make secure access easier to use and maintain reliable IAM services as Dropbox adopts new AI tools and agentic workflows.Our Engineering Career Framework is viewable by anyone outside the company and describes what’s expected for our engineers at each of our career levels. Check out our blog post on this topic and more here.Responsibilities
Design, deploy, and operate IAM controls across Dropbox’s cloud and on-premises infrastructure.Design and implement secure identity, authentication, and authorization controls for AI agents and other non-human actors.Implement least-privilege access using RBAC, ABAC, permission boundaries, service control policies, and just-in-time access.Design secure integrations using SAML, OAuth 2.1, OpenID Connect, SCIM, and SPIFFE/SPIRE.Automate identity lifecycle processes to ensure access is granted, modified, and revoked promptly.Develop identity guardrails using infrastructure-as-code and policy-as-code.Build monitoring and alerting for anomalous authentication, privilege escalation, credential misuse, and unauthorized access.Partner with Incident Response to investigate identity-related incidents and rapidly revoke compromised access.Conduct security reviews and threat modeling for new identity architectures and integrations.Maintain IAM services with strong reliability, documentation, operational ownership, and on-call support.Many teams at Dropbox run Services with on‑call rotations, which entails being available for calls during both core and non-core business hours. If a team has an on‑call rotation, all engineers on the team are expected to participate in the rotation as part of their employment. Applicants are encouraged to ask for more details of the rotations to which the applicant is applying.Requirements
5+ years of security engineering experience, including substantial IAM or identity‑security experienceHands‑on experience with Okta, Okta for AI Agents and Sailpoint, or comparable technologiesStrong understanding of authentication, authorization, least privilege, zero trust, and identity lifecycle managementExperience with SAML, OAuth 2.0/2.1, OpenID Connect, SCIM, and MFAExperience designing RBAC or ABAC authorization modelsExperience securing human and non‑human identities, including services, workloads, automation, and CI/CD systemsExperience with agentic frameworks and MCP tool integrationExperience implementing access reviews, privileged‑access controls, and joiner/mover/leaver workflowsProficiency in at least one programming or scripting language, such as Python, Go, Java, Ruby, or BashExperience with infrastructure‑as‑code, policy‑as‑code, APIs, and security automationBachelor’s degree in Computer Science, Information Security, or a related field, or equivalent practical experiencePreferred Qualifications
Experience with workload identity technologies such as SPIFFE/SPIRE, Kubernetes service accounts, or cloud workload identity.Experience securing identities and authorization for AI agents and other autonomous systems.Experience with just‑in‑time access, zero‑standing‑privilege, or privileged‑access management platforms.Familiarity with identity threat detection and response.Experience building IAM controls for multi‑account cloud environments.Familiarity with NIST SP 800‑63, NIST SP 800‑207, CIS benchmarks, and relevant identity‑security guidance.Experience supporting compliance programs such as SOC 2, ISO 27001, or FedRAMP.Security certifications such as CISSP, CCSP, or equivalent.Contributions to the identity or security community through open‑source projects, publications, or conferences.Durable SkillsSkills
AI fluency means using these tools to amplify human judgment, not replace it. We believe people with these skills will thrive as work and technology continue to evolve:Awareness: Understand yourself and others.Judgment: Evaluate information and make decisions in complex situations.Adaptability: Learn, adjust, and stay effective through change.Connection: Communicate, collaborate, and build trust.To learn more about why these skills matter and what the data shows about thriving through change, read this blog post from our Chief People Officer, Melanie Rosenwasser.Compensation
Canada Pay Range$191,300—$258,700 CADThe range listed above is the expected annual salary/OTE (On‑Target Earnings) for this role, subject to change.Salary/OTE is just one component of Dropbox’s total rewards package. All regular employees are also eligible for the corporate bonus program or a sales incentive (target included in OTE) as well as stock in the form of Restricted Stock Units (RSUs).Company Description
Read more about our benefits here.Dropbox isn’t just a workplace—it’s a living lab for designing a more enlightened way of working for hundreds of millions of people worldwide. We’re a global community of bold visionaries and resourceful doers shaping the future of Dropbox and, in turn, the future of work. Our Virtual First model combines the autonomy of a distributed workplace with the power of human connection, creating space for meaningful work and lasting relationships. With a startup mindset and enterprise‑level opportunities, we expect Dropbox employees to think critically, stay curious, and use modern tools, including AI, to improve how work gets done. Here, you can be who you are and grow into who you’re meant to be. You own your impact, helping make work more intuitive, joyful, and human for yourself and hundreds of millions of people worldwide. If you’re ready to push boundaries and challenge yourself, Dropbox is ready for you.Team Description
The Dropbox Engineering Team develops the technology, platforms, and products that create more enlightened ways of working for hundreds of millions of people. Customers rely on Dropbox to manage, share, and collaborate on content seamlessly—our engineering makes that easier and more intuitive than ever before. Our platform features a robust systems software layer that stores and processes exabytes of data, and a suite of growing services that enhance core products like our sharing and sync engine. We’re also driving innovation with new offerings such as Dash, our AI‑powered knowledge management engine. Our infrastructure spans high‑performance servers and cutting‑edge components across multiple data centers worldwide, ensuring reliability, speed, and scalability at a global scale. We think like a startup but build for an enterprise, exploring new possibilities that transform how people work. If you’re excited about turning complex technical challenges into intuitive solutions at scale, join our Engineering team.Virtual First
Dropbox’s Virtual First way of working is designed to help people do their best work with flexibility, autonomy, and connection. Day to day, teams work remotely with nonlinear schedules and core collaboration hours that support deep focus and individual working styles. We prioritize asynchronous communication to improve clarity, respect deep work time, and reduce unnecessary meetings. While remote work is the primary experience for our employees, we also prioritize intentional, in‑person connection. We bring teams together through regular team gatherings, on‑demand workspaces, and Dropbox Neighborhood events in order to strengthen team cohesion, foster creativity, and enhance momentum. Virtual First is built to provide the same access to opportunity, growth, and impact for everyone, regardless of location.This role requires travel to offsites and various other team gatherings (approximately 5‑10% of the year or 2‑3 days per quarter). We provide advance notice when possible and encourage candidates to discuss any accommodation needs during the interview process.AI Fluency
AI fluency is a core part of how we work and grow. It’s not about being an expert—it’s about using these tools thoughtfully and effectively to improve your work and support others.We Look For Four Key Behaviors In Candidates
Ownership: You use AI responsibly by protecting data, applying sound judgment, and taking accountability for the quality and accuracy of your work.Experimentation: You explore new AI capabilities and apply them to improve workflows within approved tools and practices.Leverage: You use AI to enhance thinking, improve efficiency, and increase your impact and your team’s.Learning: You stay current on emerging AI tools and trends, continuously build your skills, and share what you learn with others.Together, these behaviors help build a workforce where technology amplifies human judgment, creativity, and impact.Dropbox supports responsible use of AI for preparation, but misrepresentation of skills or experience is not permitted. To learn more, see our approach to AI in hiring.Dropbox is an equal opportunity employer. We are a welcoming place for everyone, and we do our best to make sure all people feel supported and connected at work.
#J-18808-Ljbffr