Principal Security Engineer

Responsibilities

• As a Principal Enterprise Security Engineer, you will advance Roblox’s Enterprise Security strategy by shaping and evolving security architecture in alignment with business objectives
• You will lead the design, deployment, and governance of security solutions that safeguard Roblox’s corporate infrastructure while enabling scalable, secure operations. Partnering cross-functionally with Corporate Engineering and Trust & Safety, you will translate organizational priorities into resilient security capabilities that balance risk, compliance, and productivity
• You will join the Platform, Enterprise, and Application Security group, reporting directly to the Senior Manager of Enterprise Security Engineering. You’ll partner with security professionals across the Info Sec team, and work cross-functionally with teams throughout Roblox to drive security initiatives that scale with our business
• Define and maintain enterprise-wide security standards and principles that guide how security is implemented across business workflows, ensuring consistency, scalability, and alignment with organizational risk posture
• Lead and drive initiatives across core security domains, including Endpoint Security, SaaS Security, Identity & Access Management (IAM), Agentic AI Governance, and Supply Chain Security
• Collaborate closely with IT, engineering, Dev Ops, and business stakeholders to integrate security tools, policies, and processes into enterprise systems and workflows, enabling secure‑by‑design implementations
• Mentor engineers and stakeholders, serving as a trusted advisor on security architecture, control design, and secure implementation patterns

• Experience with modern Enterprise infrastructure and SaaS ecosystems, including Google Workspace, Okta, MDM solutions, SSPM, ZTA and cloud‑native environments
• 9+ years of relevant professional experience
• Strong understanding of security concepts including zero trust architecture, threat modeling, security frameworks (SOC 2, ISO 27001), and best practices in corporate security environments
• Demonstrated ability to design and operationalize security policies, principles, and controls across diverse teams and systems
• Deep expertise in Identity and Access Management, Authentication & Authorization, Endpoint management, Network Security controls and SaaS security posture management
• Experience designing or operating workflows using low‑code and no‑code orchestration platforms
• Comfortable with ambiguity:
  You gather data and navigate complex situations even when facing incomplete information or unclear requirements
• Strategic thinker:
  You define clear business requirements and assess commercial solutions to inform build vs. buy decisions
• Collaborative:
  You love working with your direct team and cross‑functional partners