Device Trust

Device Trust Engineer Jobs

2 jobs found

Today

Member of Technical Staff (MTS), Software Engineer, Identity & Access Management

Salesforce Bellevue, WA

Bellevue, WA

Today

$117k - $177k/yr Full time Backend Developer Ai Development APIs

Apply Now

Job Description

Salesforce Enterprise Security is hiring a Software Engineer for the Identity and Access Management (IAM) team to design and build foundational IAM platform services focused on device trust, identity security components, and secure operations.

Responsibilities

Build and ship production-grade software across Linux, macOS, and Windows using modern engineering practices, with AI as a core part of the development workflow
Design and orchestrate systems where AI agents integrate with human workflows
Critically evaluate code produced by humans or AI for correctness, quality, security, and performance
Implement device trust and attestation capabilities, including certificate-based and hardware-backed trust mechanisms
Contribute to IAM platform components covering certificates, Public Key Infrastructure (PKI), secure transport, and access enforcement
Deploy and maintain containerized workloads using Kubernetes and Docker, supported by infrastructure-as-code tooling such as Terraform
Improve secure development workflows using automated testing, CI/CD pipelines, and code quality and security checks
Support vulnerability remediation by triaging findings, validating fixes, and partnering with teammates to close security gaps quickly
Participate in incident response and operational investigations by collecting data, analyzing system behavior, and supporting remediation
Collaborate with security, infrastructure, and engineering teams to support platform reliability and trust in an Agile environment

Requirements

3 years of software engineering experience
Experience building software in one or more languages: Golang, Python, Java, or similar
Demonstrated AI-first approach to engineering using tools such as Claude Code, GitHub Copilot, Codex, or Cursor
Understanding of distributed systems, microservices architecture, and cloud-native services
Familiarity with core software development fundamentals: debugging, testing, and version control with Git
Familiarity with REST/JSON APIs and service integration concepts
Understanding of CI/CD pipelines and developer workflows
Understanding of Linux or system-level development fundamentals
Interest in enterprise security, identity, authentication, and access management
Strong communication skills and willingness to collaborate and learn in a team environment
Related technical degree required

Technologies

Golang, Python, Java
Claude Code, GitHub Copilot, Codex, Cursor
Linux, macOS, Windows
REST, JSON, Git
CI/CD, Kubernetes, Docker, Terraform
Public Key Infrastructure (PKI), certificate-based trust, hardware-backed trust mechanisms

Benefits

Time off programs
Medical
Dental
Vision
Mental health support
Paid parental leave
Life and disability insurance
401(k)
Employee stock purchasing program

Even Better If

Exposure to deploying or troubleshooting Kubernetes workloads and familiarity with infrastructure-as-code tools such as Terraform or CloudFormation
Experience with observability platforms (logging, metrics, or distributed tracing) and understanding of reliability concepts such as SLOs and SLIs
Interest in security and identity concepts including TLS, OAuth, SAML, MFA, passkeys, or certificates, plus curiosity about Zero Trust, device trust, or TPM/T2-based attestation
Awareness of secure coding practices including OWASP Top 10, input validation, and secrets management; exposure to security tooling such as vulnerability scanning, static analysis, or dependency scanning
Working knowledge of SQL and/or NoSQL databases and familiarity with testing frameworks
Advanced prompt engineering skills to write precise, structured prompts that make AI outputs reliable, secure, and production-ready
Relevant coursework, degree, or project experience in distributed systems, cloud infrastructure, cybersecurity, or security automation

Accommodation

If you need a reasonable accommodation during the application or the recruiting process, please submit a request via the Accommodations Request Form.

AI in the Recruiting Process

Salesforce uses artificial intelligence (AI) tools to help recruiters assess and evaluate candidates’ resumes and qualifications throughout the recruiting process.

Location: Bellevue, WA (onsite)
Salary: USD 117,200 - 176,700 per year
Minimum Experience: 3 years

View full job page →

1d ago

Senior Information Security Engineer

Match Group New York, NY

New York, NY

1d ago

$180k - $200k/yr Full time Senior Agent Ai Security

Apply Now

Job Description

Match Group is hiring a Senior Information Security Engineer (onsite) in New York, NY to drive a unified identity and access security strategy across a global portfolio.

Responsibilities

Lead a comprehensive identity and access lifecycle strategy across the global portfolio
Authentication (AuthN): enhance identity security by enforcing device trust, enabling post-auth detection, and supporting DPoP
Authorization (AuthZ): apply least privilege and right-size entitlements to balance security with delivery velocity
Non-Human & AI Agent Identity: modernize secure handling for NHIs such as OAuth tokens, service accounts, and API keys
Establish security guardrails for emerging AI agents and MCP connections
PAM & Just-in-Time (JIT) access: modernize privileged access and implement JIT models to reduce standing privileges and secure high-risk admin actions
Own and harden Cloudflare ZTNA policies and support migration away from traditional network-based access patterns
Integrate identity strategy with broader CorpSec efforts by incorporating device signals from Fleet/EDR, SaaS security, and vulnerability management into access controls for a unified security posture
Reduce manual toil by engineering automated solutions using scripting, no-code tools, or AI to solve problems at scale

Requirements

7+ years in security engineering, IT engineering, or infrastructure, with meaningful depth in identity and access
Strong hands-on experience with Okta, including policy design, device assurance, FastPass, device trust, and RBAC
Experience with Cloudflare Zero Trust or a comparable platform
Strong knowledge of SAML, OIDC, OAuth 2.0, and SCIM
Experience with IGA solutions (e.g., Okta Identity Governance, SailPoint), including deep understanding of identity lifecycles and compliance requirements
Experience securing non-human identities (service accounts, OAuth apps, tokens) and setting guardrails for AI agents
Experience using Terraform or other IaC tools to manage infrastructure changes, with emphasis on GitOps fluency
Practical approach to least privilege with the ability to right-size access without excessive friction to the business
Experience building automation (e.g., Okta Workflows, Lambda, Windmill) using Python or similar, with judgment on when to automate versus avoid over-engineering
Practical use of AI tooling in your own workflow
Proven ability to influence cross-functional outcomes without formal authority
Ability to proactively identify, scope, and drive complex problems to completion

Technologies

Okta
Cloudflare Zero Trust / Cloudflare ZTNA
SAML, OIDC, OAuth 2.0, SCIM
Okta Identity Governance, SailPoint
Terraform, GitOps
Okta Workflows, Lambda, Windmill
Python
Fleet/EDR
DPoP, RBAC
MCP

Nice to Have

Endpoint management or EDR exposure (Jamf, CrowdStrike, or similar)
Audit and compliance experience with access controls (SOX, PCI-DSS, ISO 27001)
Experience working in global environments (EMEA/APAC)

Core Values

Take the Lead: do not ghost work or each other
Move Fast: bias for action and urgency
Better Together: collaboration and connection
Real Talk: direct communication with kindness and candor
Safety First: integrity, transparency, and consistency
Spark Fun: unlock creativity and innovation

Compensation: USD 180,000 - 200,000 per year

Location: New York, NY (onsite)

View full job page →

Device Trust Engineer Jobs

Member of Technical Staff (MTS), Software Engineer, Identity & Access Management

Senior Information Security Engineer

Get Device Trust Engineer Jobs alerts