Sr. Cloud Security Engineer - Infra Security | Roblox

As a Senior Cloud Security Engineer embedded within the Platform Security team, you will define and implement security strategy, architecture, and automated controls across Roblox's hybrid and multi-cloud environments. Operating with a high degree of autonomy, you will partner closely with Information Security and Infrastructure teams to create secure "paved roads"—building automated services and developer tooling that make the secure path the easiest path. You will architect self-healing infrastructure baselines, author cloud-tailored detections, and deploy organization-wide security guardrails that protect developers without reducing deployment velocity.

Key Responsibilities

Cloud Security Architecture & Automated Guardrails

• Paved-Road Tooling: Build innovative security services, internal tools, and developer workflows that automate compliance and accelerate safe software deployment.
• Self-Healing Infrastructure: Architect and scale automated monitoring systems that detect configuration drift and automatically enforce self-healing security baselines across cloud environments.
• Secure-by-Default Blueprints: Partner deeply with core infrastructure teams to embed threat modeling, secure-by-default design patterns, and system hardening into multi-cloud architectures.
• Policy & Egress Guardrails: Implement organizational security controls, zero-trust network boundaries, secure connectivity protocols, and strict egress controls.
• Cloud Detections & Observability: Author, optimize, and maintain threat detection logic and security observability pipelines tailored specifically to Roblox's cloud footprint.

Requirements

Technical Depth & Cloud Security Foundations

• Experience Track: 4+ years of relevant professional software and cloud security engineering experience.
• Programming Proficiency: Hands-on experience writing and maintaining code in at least one modern language (Python, Golang, or C#), with a drive to learn new technologies.
• Infrastructure-as-Code & Automation: Practical experience with IaC frameworks (Terraform, Pulumi), automated provisioning, system hardening, and cloud security policy enforcement.
• Container & Orchestration Security: Strong understanding of container security concepts and container orchestration platforms (Kubernetes).
• Network Security Best Practices: Deep operational understanding of network security, resource isolation, zero-trust architectures, and egress filtering.
• Problem-Solving & Build vs. Buy: Pragmatic approach to evaluating commercial vendors, open-source tooling, and custom in-house software builds.

Preferred Qualifications

• Experience managing security posture in large-scale, multi-region hybrid clouds (AWS/GCP combined with bare-metal private clouds).
• Direct experience authoring custom OPA/Rego policies, Kyverno rules, or cloud-native posture management (CSPM) automation.
• Professional certifications such as AWS Certified Security – Specialty, CKA/CKS, or CISSP.

Total Rewards & Benefits

• Compensation & Equity: San Mateo base salary range ($251,090 – $326,060 USD) + competitive Roblox equity compensation package.
• Healthcare & Wellbeing: Comprehensive health, dental, and vision insurance packages for employees and eligible dependents.
• Onsite Perks & Campus: Modern San Mateo headquarters featuring daily catered meals, team events, and state-of-the-art technical setups.
• Time Off & Retirement: Generous vacation policies, paid company holidays, paid parental leave, and 401(k) matching programs.