Software Engineering SMTS

Role Overview

We are seeking a Full-Stack Software Engineer to join the Enterprise Security Engineering team. This role focuses on building highly scalable, fault-tolerant distributed systems for Identity and Access Management (IAM) services across Salesforce's cloud infrastructure.

About the Team

The team builds core blocks for identity lifecycle, governance, authentication, authorization, and privileged access management to protect customer trust. You will work in a full-stack environment designing end-to-end capabilities from backend APIs to user-facing experiences for human and non-human identities (NHI).

Key Responsibilities

• IAM Services: Design and build scalable services covering identity lifecycle, access requests, entitlement management, and policy-driven decisions.
• Privileged Access Management (PAM): Build capabilities for credential vaulting, session control, secrets management, and just-in-time (JIT) access flows with automatic revocation.
• Non-Human Identity Security: Model and secure service accounts, agents, workloads, and machine credentials using lifecycle governance best practices.
• Fully-Stack Development: Develop backend services in Java/Go/Python and modern front-end experiences (React) for self-service IAM tools.
• DevOps & Infrastructure: Operate containerized workloads on Kubernetes/Docker using Terraform. Implement CI/CD pipelines, monitoring, and troubleshooting in high-availability environments.
• Governance & Compliance: Integrate SoD (Segregation of Duties), least-privilege, and audit controls aligned with SOX, NIST, and SOC 2 standards across identity sources using SCIM/REST/LDAP protocols.

Required Skills

• Experience: SMTS: Minimum of 5+ years building distributed systems in SaaS/PaaS/IaaS environments.
• Languages & Frameworks: Strong backend proficiency in Java, Go, or Python; Front-end skills with React.
• IAM Domain Knowledge: Deep understanding of authentication, authorization (RBAC), entitlement models, PAM protocols (OAuth2, OIDC, SAML, SCIM).
• Cloud & Containers: Hands-on experience on AWS/Azure/GCP using Docker and Kubernetes.
• DevOps Practices: Proficiency with Git/Jenkins for CI/CD, secure coding, and ownership of production systems.

Preferred Qualifications

• Experience integrating AI/agentic capabilities into IAM workflows.
• Familiarity with commercial platforms like SailPoint, Okta, or CyberArk.
• Background working in globally distributed teams within large enterprises.