Software Engineer, MTS, Enterprise Security, Identity & Access Management

Responsibilities

• Design, deliver, and operate scalable IAM services and APIs that cover identity lifecycle, access requests, entitlements and role management, and access certifications.
• Develop Privileged Access Management capabilities including credential vaulting and rotation, session control, secrets management, and just-in-time access flows with time-bound entitlements that auto revoke.
• Model and secure non-human identities such as service accounts, agents, workloads, and machine credentials, with issuance, rotation, and lifecycle governance.
• Create full-stack features, backend services, and modern web front-ends that provide intuitive self-service and administrative IAM experiences.
• Build and manage containerized workloads using Kubernetes and Docker, automate with Terraform, and operate in a full DevOps model with ongoing monitoring and optimization.
• Integrate across identity sources, directories, and downstream applications via SCIM, REST, and event-driven patterns.
• Partner with governance and compliance teams to embed separation of duties, least-privilege controls, and audit requirements (SOX, NIST, SOC 2) into the platform.
• Write clean, secure code, participate in design and code reviews, and champion secure SDLC practices.
• Collaborate with security, infrastructure, product, and engineering teams to preserve platform integrity and trustworthiness.
• Document technical designs, runbooks, and enablement materials for teams and operations.
• Design impactful features, mentor junior engineers, and guide technical direction and ongoing platform improvements.
• Deliver high-quality, production-grade software using modern engineering practices with AI as a core element of the development workflow to enhance security and performance.
• Architect complex systems where AI agents integrate with human workflows to drive efficiency and innovation at scale.
• Contribute to a shared system context that records designs, constraints, and standards to help AI operate reliably, and critically review code for correctness, quality, security, and performance.

Requirements

• At least 3 years of professional software development experience building distributed SaaS, PaaS, or IaaS environments.
• Full-stack capability with strong backend skills in Java, Go, or Python, and frontend experience with modern frameworks such as React.
• Deep understanding of IAM concepts including identity governance and lifecycle, authentication, authorization, RBAC and entitlement models, PAM with JIT, and protocols like OAuth 2.0, OIDC, SAML, SCIM, and LDAP.
• Experience designing and consuming REST APIs (JSON/XML, OpenAPI/Swagger) and integrating diverse systems.
• Solid background on public cloud platforms (AWS, Azure, and/or GCP), containerization (Docker, Kubernetes), and infrastructure as code (Terraform).
• Hands-on CI/CD and source control experience (Git, Jenkins, or equivalents), with secure coding and defensive programming practices.
• Strong DevOps ownership for production systems in high-availability environments, including monitoring and incident response.
• Excellent problem-solving, debugging, communication, and collaboration skills.
• An AI-first approach to engineering, leveraging AI to accelerate learning across the stack and contribute beyond core duties.
• Experience using AI tools (for example Claude Code, GitHub Copilot, Codex, Cursor) within development workflows and advanced prompt engineering to ensure reliable, secure outputs.
• Bachelor's degree in Computer Science, Engineering, or a related field, or equivalent practical experience.

Technologies

• Java
• Go
• Python
• React
• AWS
• Azure
• GCP
• Docker
• Kubernetes
• Terraform
• SCIM
• REST
• OpenAPI/Swagger
• OAuth 2.0
• OIDC
• SAML
• LDAP
• JSON
• XML
• Git
• Jenkins
• Claude Code
• GitHub Copilot
• Codex
• Cursor

Benefits

• Time off programs
• Medical insurance
• Dental insurance
• Vision insurance
• Mental health support
• Paid parental leave
• Life insurance
• Disability insurance
• 401(k)
• Employee stock purchasing program

The Experience

• The Enterprise Security Engineering team at Salesforce builds scalable, fault-tolerant IAM systems that support cloud and on-premises environments, providing core identity lifecycle, governance, authentication, authorization, and PAM capabilities to protect customers and empower engineers.
• Two focused tracks within IAM Security Engineering offer distinct emphasis: IAM Platform focuses on the foundational platform including human and non-human identities, access requests, entitlements, and policy-driven decisions at enterprise scale to advance zero trust and secure agentic workflows.
• Full-Stack IAM Engineering emphasizes end-to-end capabilities from backend services to user interfaces, enabling real-time access decisions and secure AI-driven controls for autonomous workloads.

Even Better If

• Experience integrating AI and agentic features into IAM workflows or user interfaces.
• Worked with globally distributed teams in large enterprise settings.
• Familiarity with commercial IAM platforms such as SailPoint, Okta, CyberArk, or Active Directory/EntraID as a consumer or integrator.

Accommodations

If you need a reasonable accommodation during the application or recruiting process, please submit a request via the Accommodations Request Form.

Posting Statement

Salesforce is an equal opportunity employer and does not discriminate on any protected basis. Compensation in the United States will be determined by factors such as location, job level, knowledge, skills, and experience. The base salary range for this role is 117,200 to 176,700 USD per year, and additional compensation, equity, and benefits may apply. Salesforce offers a comprehensive benefits package designed to support health, balance, and financial security, including time off, health coverage, parental leave, life and disability insurance, 401(k), and an employee stock purchasing program.