Policy Engine Engineer Jobs

1 job found

1d ago

Software Engineer (MTS), Frontier Strike (EntSecTech)

Salesforce Bellevue, WA

Bellevue, WA

1d ago

$117k - $177k/yr Full time Backend Developer API APIs

Apply Now

Job Description

Join Salesforce to build and operate an autonomous AI red-teaming platform that runs secure, repeatable adversarial test suites from staging through production.

Responsibilities

Design and extend Go microservices that orchestrate multi-container test suites, including primary and utility containers, shared ephemeral volumes, and lifecycle synchronization to onboard new attack techniques as automated suites.
Build policy-based sidecar gateways that mediate each test suite’s access to target systems (mocked, staging, and production) while enforcing least-privilege and blast-radius limits as risk tiers increase.
Implement pipeline stages that dedupe, suppress noise, and auto-escalate critical findings (injection, server-side request forgery (SSRF), privilege escalation, data exfiltration) so only real signal reaches the persistent findings store.
Design per-test-suite secrets isolation using a dedicated vault, pod, and service account per suite, including automated credential rotation to prevent a compromised suite from accessing other suites’ credentials.
Deploy and operate containerized workloads on Kubernetes using Helm and Terraform on Amazon Web Services (AWS), balancing cost sensitivity across suite complexity.
Integrate with internal large language model (LLM) gateway services to track token usage and cost per scan, and build throttling and authorization controls for expensive executions.
Implement RBAC, network sandboxing, and geofencing to extend automated red-teaming safely from test environments to production.
Monitor and troubleshoot distributed platform components, ensuring findings-pipeline data integrity and catching misconfigurations before they become production incidents.
Build and ship production-grade software with modern engineering practices, applying AI as a core part of development to deliver secure, optimized, high-quality code.
Design and orchestrate complex systems where AI agents integrate into human workflows to improve efficiency and innovation at scale.
Contribute to building and maintaining shared system context, an explicit repository of system designs, constraints, and standards for reliable AI operation.
Critically evaluate code, including both human- and AI-generated output, for correctness, quality, security, and performance.

Requirements

2 - 4 years of professional software development experience.
Proficiency in Go; experience with Python or Java is acceptable.
Experience with distributed systems, microservices, and REST or gRPC APIs.
Familiarity with Kubernetes, Docker, Helm, and Terraform in a cloud environment, with AWS preferred.
Understanding of software security fundamentals: OWASP Top 10, least privilege, and secrets management.
Strong problem-solving and debugging skills in distributed, containerized systems.
Ability to work in a large-scale enterprise setting with production-safety constraints.
AI-first approach to engineering, using AI to move faster and contribute beyond a single specialty.
Experience using AI tools (e.g., Claude Code, GitHub Copilot, Codex, Cursor) in development workflows.
Advanced prompt engineering skills, writing precise structured prompts and cultivating system context to improve reliability, security, and production readiness.
Bachelor’s degree in Computer Science, Software Engineering, or a related field, or equivalent experience.

Technologies

Go, Python, Java
REST, gRPC
Kubernetes, Docker, Helm, Terraform
Amazon Web Services (AWS)
Large language model (LLM) gateway services
Role-based access control (RBAC)
OWASP Top 10
Secrets management (HashiCorp Vault)
Cloud key management services (KMS)
Open Policy Agent (OPA)
mTLS
Identity and access management (IAM)
NIST, ISO, SOC 2
AI tools: Claude Code, GitHub Copilot, Codex, Cursor

About the Team

Frontier Strike, part of Enterprise Security Technology (EntSecTech), builds and operates Harness Orchestrator, an autonomous AI red-teaming platform that continuously tests identity and AI-integrated systems like a real attacker.
This role builds the orchestration engine, policy gateways, and secrets-isolation systems to enable automated adversarial testing against production.
AI is a core part of the development workflow, pairing distributed-systems engineering with modern AI-assisted tooling to ship secure, production-grade code faster.

Even Better If…

Experience with policy engines (e.g., Open Policy Agent (OPA)) or other fine-grained authorization frameworks.
Exposure to AI/LLM security, adversarial testing, or red-teaming.
Experience with secrets vault technologies (e.g., HashiCorp Vault, cloud key management services (KMS)).
Familiarity with sidecar proxy/gateway patterns and mutual Transport Layer Security (mTLS).
Experience with identity and access management (IAM), cybersecurity, or compliance frameworks (NIST, ISO, SOC 2).

Location and Employment

Bellevue, WA (onsite)
Salary range: USD 117,200 - 176,700 per year

Accommodations

If you need a reasonable accommodation during the application or recruiting process, submit a request via the Accommodations Request Form.

View full job page →

Get Policy Engine Engineer Jobs alerts

New Policy Engine Engineer Jobs, daily.