{"id":4036976,"url":"https://alion.io/job/dropbox-security-engineer-iam","title":"Security Engineer, IAM","company":{"id":4307,"name":"Dropbox","domain":"dropbox.com","url":"https://alion.io/company/dropbox","size_band":null,"is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Greenhouse","truth_index":{"grade":"A","score":85,"open_postings":12,"ghost_share":0,"stale_share":0.417,"repost_share":0.333,"time_to_fill_p50_days":31,"computed_at":"2026-11-10T06:52:35Z"}},"role":"Security","role_family":"Security","seniority":"senior","employment_type":null,"work_mode":"remote","remote_scope":"stated_countries","remote_scope_basis":"posting_text","remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Canada"],"countries":["CA"],"hiring_countries":["CA"],"hiring_countries_total":1,"salary":null,"salary_estimate":null,"experience_years_min":5,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Agentic Workflows","optional":false},{"name":"AI Agents","optional":false},{"name":"CI/CD","optional":false},{"name":"Dropbox","optional":false},{"name":"Go","optional":false},{"name":"IAM","optional":false},{"name":"Java","optional":false},{"name":"Least Privilege","optional":false},{"name":"Model Context Protocol","optional":false},{"name":"Okta","optional":false},{"name":"Python","optional":false},{"name":"Ruby","optional":false},{"name":"Threat Modeling","optional":false},{"name":"Zero Trust","optional":false},{"name":"CIS Benchmarks","optional":true},{"name":"FedRAMP","optional":true},{"name":"ISO 27001","optional":true},{"name":"Kubernetes","optional":true},{"name":"SOC 2","optional":true}],"status":"live","first_seen_at":"2026-11-10T19:18:10Z","employer_posted_date":"2026-11-10","last_verified_at":"2026-11-10T20:46:56Z","board_verified":true,"closed_at":null,"days_open":0,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":0},"description":"Role Description\nSecurity Engineers at Dropbox safeguard our digital ecosystem alongside a diverse team of professionals dedicated to protecting our products and users. Trusted by millions, our mission is to integrate security seamlessly into Dropbox, empowering confident collaboration. \nIn this role, you’ll build and operate the identity and access controls that help Dropbox employees, services, and AI agents access what they need securely. You’ll combine security engineering and automation to strengthen authentication and authorization, enforce least privilege, and simplify identity lifecycle management across our infrastructure. Working closely with Infrastructure, Corp Engineering, Developer Platform, and Incident Response, you’ll make secure access easier to use and maintain reliable IAM services as Dropbox adopts new AI tools and agentic workflows.\nOur Engineering Career Framework is viewable by anyone outside the company and describes what’s expected for our engineers at each of our career levels. Check out our blog post on this topic and more here.\nResponsibilities\nDesign, deploy, and operate IAM controls across Dropbox’s cloud and on-premises infrastructure.\nDesign and implement secure identity, authentication, and authorization controls for AI agents and other non-human actors.\nImplement least-privilege access using RBAC, ABAC, permission boundaries, service control policies, and just-in-time access.\nDesign secure integrations using SAML, OAuth 2.1, OpenID Connect, SCIM, and SPIFFE/SPIRE.\nAutomate identity lifecycleprocesses to ensure access is granted, modified, and revoked promptly.\nDevelop identity guardrails using infrastructure-as-code and policy-as-code.\nBuild monitoring and alerting for anomalous authentication, privilege escalation, credential misuse, and unauthorized access.\nPartner with Incident Response to investigate identity-related incidents and rapidly revoke compromised access.\nConduct security reviews and threat modeling for new identity architectures and integrations.\nMaintain IAM services with strong reliability, documentation, operational ownership, and on-call support.\nMany teams at Dropbox run Services with on-call rotations, which entails being available for calls during both core and non-core business hours. If a team has an on-call rotation, all engineers on the team are expected to participate in the rotation as part of their employment. Applicants are encouraged to ask for more details of the rotations to which the applicant is applying.\nRequirements\n5+ years of security engineering experience, including substantial IAM or identity-security experience\nHands-on experience with Okta, Okta for AI Agents and Sailpoint, or comparable technologies\nStrong understanding of authentication, authorization, least privilege, zero trust, and identity lifecycle management\nExperience with SAML, OAuth 2.0/2.1, OpenID Connect, SCIM, and MFA\nExperience designing RBAC or ABAC authorization models\nExperience securing human and non-human identities, including services, workloads, automation, and CI/CD systems\nExperience with agentic frameworks and MCP tool integration\nExperience implementing access reviews, privileged-access controls, and joiner/mover/leaver workflows\nProficiency in at least one programming or scripting language, such as Python, Go, Java, Ruby, or Bash\nExperience with infrastructure-as-code, policy-as-code, APIs, and security automation\nBachelor’s degree in Computer Science, Information Security, or a related field, or equivalent practical experience\nPreferred Qualifications\nExperience with workload identity technologies such as SPIFFE/SPIRE, Kubernetes service accounts, or cloud workload identity.\nExperience securing identities and authorization for AI agents and other autonomous systems.\nExperience with just-in-time access, zero-standing-privilege, or privileged-access management platforms.\nFamiliarity with identity threat detection and response.\nExperience building IAM controls for multi-account cloud environments.\nFamiliarity with NIST SP 800-63, NIST SP 800-207, CIS benchmarks, and relevant identity-security guidance.\nExperience supporting compliance programs such as SOC 2, ISO 27001, or FedRAMP.\nSecurity certifications such as CISSP, CCSP, or equivalent.\nContributions to the identity or security community through open-source projects, publications, or conferences.\nDurable Skills\nAI fluency means using these tools to amplifyhuman judgment, not replace it. We believe people with these skills will thrive as work and technologycontinue to evolve:\nAwareness: Understand yourselfand others.\nJudgment: Evaluateinformation and make decisions in complex situations.\nAdaptability: Learn, adjust, and stay effective through change.\nConnection: Communicate, collaborate, and build trust.\nTo learn more about why these skills matter and what the data shows about thriving through change, read this blog post fromour Chief People Officer, Melanie Rosenwasser.\nCompensation\nCanada Pay Range\n$191,300—$258,700 CAD","description_format":"text","description_chars":5019,"description_truncated":false,"requirements":{"experience_years_min":5,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[{"name":"Canada","iso":"CA","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Digital Signature","Team Communication & Collaboration","Cloud Storage & File Sharing"],"lifecycle":[{"event":"open","at":"2026-11-10T20:46:56Z"}],"visa":[],"liveness":{"score":86,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.86,"p_room":1,"age_days":0,"expected_fill_days":31,"reasons":["conf:0","win:early"],"computed_at":"2026-11-10T21:26:34Z"},"pay":null,"html_url":"https://alion.io/job/dropbox-security-engineer-iam","json_url":"https://alion.io/job/dropbox-security-engineer-iam.json","meta":{"generated_at":"2026-11-10T21:26:34Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":32,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-11T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.1,"usd":0.01,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":4307},"rest":"https://alion.io/mcp/rest/get_company?id=4307"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fdropbox-security-engineer-iam"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":2,"usd":0.2},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fdropbox-security-engineer-iam"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.1,"usd":0.01},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fdropbox-security-engineer-iam"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/dropbox-security-engineer-iam\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fdropbox-security-engineer-iam"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":4036976}},{"tool":"search_jobs","arguments":{"company":"dropbox.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":4036976},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}