Information Security

Information Security Developer Jobs

22 jobs found

1d ago

Software Engineer – Junior Level for Cross Domain Solutions

General Dynamics Mission Systems, Inc Taunton, MA

Taunton, MA

1d ago

$90k - $99k/yr Full time Backend Developer Data Processing Data Security

Apply Now

Job Description

This junior-level Software Engineer role supports a cross-functional team delivering Crypto and Cross Domain Solutions within the Space, Embedded, and Intelligence business area. The position is based in Taunton, MA and involves applying software engineering practices and agile methodology to real-world defense-focused technology development.

Role Overview

As a member of a cross functional team, you will contribute to the design and development of Crypto and Cross Domain Solutions for the Space, Embedded, and Intelligence business area. The work emphasizes practical application of software engineering concepts, agile methods, and continuous learning while building capability across increasing responsibility and complexity.

Responsibilities

Participate in designing and developing Crypto and Cross Domain Solutions for the Space, Embedded, and Intelligence business area as part of a cross functional team.
Apply knowledge of software engineering concepts, principles, theories, and the software development process, including agile methodology.
Demonstrate understanding of the software development process with agile experience.
Learn new information quickly and take on increasing responsibilities as technical complexity grows.
Collaborate effectively in a team-oriented environment and contribute to team success.
Commit to ongoing professional development for yourself and others.
Identify opportunities to apply AI for continuous improvement and innovation.
Support Linux application development and related security and systems engineering activities.
Leverage experience with SELinux and Embedded Linux technologies including VxWorks, RTOS, CDS, ESXi, or YOCTOL.
Work with Git and GitLab for source control.
Use relevant programming languages, including C/C++, C#, Java, Python, or Rust, as needed for assigned tasks.
Apply BASH, sed, and awk in development workflows.
Handle XML processing including XPath and XSD Schemas (Alpha only as listed).
Use object-oriented programming, with emphasis on Java and Java EE.
Apply JavaScript, including React, where applicable.
Work with SQL, with emphasis on PostgreSQL, when required.
Operate effectively in a team oriented, personally driven, fast-paced environment.

Required Qualifications

Bachelor’s degree in Software Engineering, Engineering, Science, or Math, plus 1 year of relevant experience; or a Master’s degree.
Ability to obtain a Department of Defense Secret security clearance required at time of hire.
Applicants selected will be subject to a U.S. Government security investigation and must meet eligibility requirements for access to classified information.
Due to the nature of work performed within the facilities, U.S. citizenship is required.
Minimum experience level listed: 1 years.

Technologies

Relevant technologies include C/C++, C#, Java, Python, Rust, Linux, SELinux, VxWorks, RTOS, CDS, ESXi, YOCTOL, Git, GitLab, BASH, sed, awk, XML, XPath, XSD Schemas, Java EE, JavaScript, React, SQL, and PostgreSQL.

Workplace Location

The role is fully on-site in Taunton, MA with some flexibility to be Hybrid as listed.

Compensation

USD 90,098 - 99,000 per year (estimate based on experience and other factors such as geographic location). Actual pay may vary. Combined salary range: USD $90,098.00 - USD $99,000.00 /Yr.

Benefits

Opportunities for continuous learning and development.
Research oriented work alongside teams developing practical solutions for national security.
Flexible scheduling with an every other Friday off option (9/80 schedule).
Competitive benefits including 401k matching, flex time off, paid parental leave, healthcare benefits, health and wellness programs, employee resource and social groups, and more.
More details available at gdmissionsystems.com/careers/why-work-for-us/benefits.

Clearance Requirements

Ability to obtain a Department of Defense Secret security clearance is required at time of hire.
Selected applicants will undergo a U.S. Government security investigation and must meet eligibility requirements for access to classified information.
U.S. citizenship is required due to the nature of work performed within company facilities.

Job Status

This job posting will remain open until the position is filled.

View full job page →

2d ago

Software Engineering Manager, Cybersecurity

Caterpillar Peoria, IL

Peoria, IL

2d ago

$148k - $240k/yr Full time Manager Application Security Data Security

Apply Now

Job Description

Lead cybersecurity engineering at Caterpillar by strengthening security-by-design across a division’s application and product portfolio. This onsite role in Peoria, IL (with additional location options) combines team leadership with practical application security outcomes, measurable risk reduction, and scalable security controls embedded throughout the software development lifecycle.

Compensation: $147,760 - $240,110 per year. Travel: up to 20%. Work setup: onsite five days a week.

What you’ll do

Lead, hire, coach, and develop an engineering team, setting clear goals and managing performance.
Build a network of security champions across delivery teams to strengthen ownership and consistent secure delivery.
Own the division’s application security improvement roadmap in partnership with central cybersecurity.
Turn business needs and enterprise policy into prioritized initiatives, work plans, schedules, resource estimates, and progress reviews.
Manage team capacity, budgets, tools, and supplier relationships.
Review technical standards, architecture, and design conformance; resolve delivery constraints; drive continuous improvement in quality and service effectiveness.
Embed security-by-design across the SDLC, including threat modeling, secure code practices, pull-request review, and security testing.
Guide secure handling of secrets, cloud configuration, and third-party dependency management.
Establish documented security release gates using approved enterprise processes.
Ensure API and endpoint authentication, authorization, and access-control reviews are completed and approved before code advances through environments.
Accelerate adoption of shared security tools and preventive controls within CI/CD pipelines.
Use automation and AI-assisted scanning with appropriate oversight, validated findings, and clear accountability.
Lead vulnerability triage with security experts by validating accuracy, removing duplicates, applying a consistent severity rubric (such as CVSS), assessing business impact, and prioritizing high-risk issues.
Assign remediation owners, agree timelines, and track findings to verified closure; escalate risk through governance and prioritize systemic root-cause fixes.
Maintain accurate application, asset, and repository inventories with clear ownership mapping.
Build trustworthy portfolio dashboards covering scan coverage, validated findings, remediation aging, agreed service-level performance, and risk reduction.
Conduct security progress reviews and communicate decisions, trade-offs, and support needs with stakeholders.
Coordinate audit evidence, policy alignment, and remediation with central cybersecurity and application security teams.
Create a shared home for division security guidance, training, and documentation; coach teams and suppliers to make security practices sustainable.

What you bring

Bachelor’s degree in computer science, information systems, cybersecurity, or a related field, or equivalent practical experience.
Strong experience as a Software Engineering Manager or similar lead experience.
Deep knowledge across software development, architecture, integration, and testing, with practical secure development experience for modern applications, APIs, and cloud environments.
Broad cybersecurity knowledge and hands-on application security judgment, including threat modeling, authentication and authorization, vulnerability validation, remediation, and automated security controls.
Experience translating security policies and frameworks into engineering controls, supporting audits, and managing risk-based improvement programs with measurable outcomes.
Practical knowledge of OWASP guidance and security testing tools, including static and dynamic analysis, dependency and secret scanning, and integrating controls into delivery pipelines.
A proven track record of building security champions, improving engineering practices, and using reliable metrics to drive adoption and recurring risk reduction.
Strong communication, stakeholder management, and program leadership skills, including the ability to explain technical risk in business terms and balance security, quality, cost, and delivery speed.
Experience scaling application security across complex or global enterprise environments, with product-centric or Agile delivery and collaboration with central security preferred.
Relevant certifications such as CISSP, CISM, CSSLP, or GIAC application security credentials; a related master’s degree; or comparable advanced expertise demonstrated through practice preferred.

Benefits

Medical, dental, and vision benefits*
Paid time off plan (Vacation, Holidays, Volunteer, etc.)*
401(k) savings plans*
Health Savings Account (HSA)*
Flexible Spending Accounts (FSAs)*
Health Lifestyle Programs*
Employee Assistance Program*
Voluntary Benefits and Employee Discounts*
Career Development*
Incentive bonus*
Disability benefits*
Life Insurance*
Parental leave
Adoption benefits
Tuition Reimbursement

Additional details

Candidate must be in Chicago, IL, Peoria, IL, Denver, CO, or Dallas, TX.
Relocation assistance: not available.
Visa sponsorship: not available.
Onsite requirement: five days a week.
Travel: up to 20%.
Employment is conditioned upon successful completion of a drug screen.

Career area: Technology, Digital and Data

View full job page →

9d ago

Principal Software Engineer — Application Security & AI Trust Architecture

Cisco Systems San Jose, CA

San Jose, CA

9d ago

$221k - $380k/yr Full time Ai Security Ai Trust Api Security

Apply Now

Job Description

Lead software security and AI trust architecture efforts across software platforms and services.

Responsibilities

Define and drive security architecture across software platforms and services.
Translate high-level security strategy into engineering execution to keep products secure from the cloud to the box.
Lead cross-functional initiatives and mentor engineering team members.
Engage with customers and apply AI to improve the development lifecycle and threat prevention capabilities.
Partner with application teams to create secure-by-default software patterns.
Implement strict Model Context Protocol (MCP) access boundaries.
Enforce spec-driven security contracts.
Mitigate vulnerabilities specific to autonomous agent workflows, including prompt injection, indirect data exfiltration, and unauthorized tool invocation.
Design trust boundaries, sandboxing models, and execution guardrails for autonomous application agents and LLM tool-calling workflows.
Architect granular authentication, authorization, and least-privilege scoping for MCP servers, tool registries, and external integrations.
Mitigate emerging AI threat vectors such as OWASP Top 10 for LLMs, indirect prompt injection, tool hijacking, credential harvesting, and context leakage.
Establish spec-driven security standards across application contracts, embedding authentication schemes, data sanitization, and authorization scopes directly into machine-readable specs.
Embed security contracts into OpenAPI, TypeSpec, and gRPC/Protobuf specifications.
Implement automated security contract testing and static/dynamic schema validation to detect authorization bypasses, Broken Object Level Authorization (BOLA), and injection vulnerabilities before deployment.
Lead comprehensive architectural threat modeling for critical application tiers, distributed business logic, and multi-tenant data boundaries.
Create reusable, hardened software design patterns, cryptographic utilities, and session management frameworks for application engineering teams.
Architect and scale automated security gates in CI/CD pipelines, including SAST, DAST, IAST, software composition analysis, container image signing, and SBOM tracking.
Define policy-as-code frameworks to enforce deterministic security baselines across service deployments (e.g., OPA/Rego, Cedar).
Act as the principal technical escalation point for complex application security architecture reviews and critical vulnerability disclosures.
Mentor senior software engineers on defensive coding practices, modern API security standards, and zero-trust application design.

Requirements

Bachelor’s degree in Computer Science, Engineering, or a related technical field.
15+ years of experience in software engineering and application security architecture, including designing, securing, and operating distributed applications.
Experience with application security frameworks such as OWASP Top 10, OWASP API Top 10, CWE/SANS 25, or zero-trust application patterns.
Experience in identity and access governance, including one or more of OAuth 2.0, OIDC, SAML, mTLS, SPIFFE/SPIRE, or fine-grained authorization models (RBAC, ABAC, ReBAC).
Experience in at least one backend language: Python, Go, TypeScript/Node.js, Rust, or Java.
Experience integrating security controls into cloud-native architectures such as Kubernetes, AWS/GCP/Azure, API gateways, or service meshes.

Technologies

Model Context Protocol (MCP), LLM tool-calling workflows
OpenAPI, TypeSpec, gRPC/Protobuf
Open Policy Agent (OPA), Rego, Cedar
OWASP Top 10, OWASP API Top 10, OWASP Top 10 for LLMs
CWE/SANS 25
OAuth 2.0, OIDC, SAML, mTLS, SPIFFE/SPIRE
RBAC, ABAC, ReBAC
Python, Go, TypeScript/Node.js, Rust, Java
Kubernetes, AWS, GCP, Azure, API gateways, service meshes
SAST, DAST, IAST
Software composition analysis, container image signing, SBOM tracking
OPA/Rego, Semgrep, CodeQL, CVE

Preferred Qualifications

Experience with the security implications of MCP or similar AI tool-invocation interfaces.
Experience writing policy-as-code engines (Open Policy Agent, AWS Cedar, Oso/Polar) or custom linter/SAST rules (Semgrep, CodeQL).
Active involvement in application security research, CVE publications, open-source security tooling, or industry working groups (OWASP, CNCF Security, OASIS).
Relevant security certifications, such as CISSP, CSSLP, CCSP, or AWS Certified Security.
Experience evaluating and securing LLM-powered applications, tool-use execution loops, and RAG architectures.

Benefits

Medical, dental and vision insurance
401(k) plan with a Cisco matching contribution
Paid parental leave
Short and long-term disability coverage
Basic life insurance
Grants of Cisco restricted stock units that vest following continued employment with Cisco for defined periods of time
10 paid holidays per full calendar year
1 floating holiday for non-exempt employees
1 paid day off for employee’s birthday
Paid year-end holiday shutdown
4 paid days off for personal wellness determined by Cisco
Non-exempt employees: 16 days of paid vacation time per full calendar year, accrued at 4.92 hours per pay period for full-time employees
Exempt employees: flexible vacation time off program with no defined limit on vacation time use (subject to availability and business limitations)
80 hours of sick time off provided on hire date and each January 1st thereafter, with up to 80 hours of unused sick time carried forward
Additional paid time away may be requested for critical or emergency issues for family members
Optional 10 paid days per full calendar year to volunteer
Non-sales roles may be eligible for annual bonuses based on Cisco’s policies

Location: San Jose, CA (onsite)

Salary: USD 220,900 - 380,000 per yearly

Expected application window closing date: 10/30/2026

Education: Bachelor’s degree in Computer Science, Engineering, or a related technical field

View full job page →

14d ago

Software Engineer (MTS), Frontier Strike (EntSecTech)

Salesforce Bellevue, WA

Bellevue, WA

14d ago

$117k - $177k/yr Full time Backend Developer API APIs

Apply Now

Job Description

In this onsite Software Engineer role within Salesforce’s Enterprise Security Technology (EntSecTech), you’ll help build and run an autonomous AI red-teaming platform called Harness Orchestrator. Frontier Strike continuously tests Salesforce identity and AI-integrated systems in ways intended to mirror real attacker behavior, and your work will focus on secure orchestration, policy enforcement, and safe execution of adversarial test suites.

You’ll design production-grade systems that coordinate containerized test workloads, implement strict access controls and secrets isolation, and ensure the findings pipeline remains reliable as tests scale from lower-risk environments toward production.

What you’ll do

Design and extend Go microservices that orchestrate multi-container test suites, including primary and utility containers, shared ephemeral volumes, and lifecycle synchronization to onboard new attack and test techniques as repeatable automated suites.
Build policy-based sidecar gateways that mediate every test suite’s access to its target system across mocked, staging, and production, enforcing least-privilege and blast-radius limits as risk tiers increase.
Implement pipeline stages to dedupe, suppress noise, and auto-escalate critical findings (injection, server-side request forgery (SSRF), privilege escalation, data exfiltration) so only real signal reaches the persistent findings store.
Design per-test-suite secrets isolation using a dedicated vault, pod, and service account per suite, along with automated credential rotation to prevent a compromised suite from reaching other suites’ credentials.
Deploy and operate containerized workloads on Kubernetes using Helm and Terraform on Amazon Web Services (AWS), where individual test run cost can vary based on suite complexity.
Integrate with internal large language model (LLM) gateway services to track token usage and cost per scan, and build throttling and authorization controls for expensive test executions.
Implement RBAC, network sandboxing, and geofencing so automated red-teaming can be extended safely from test environments to production.
Monitor and troubleshoot distributed components, protecting findings-pipeline data integrity and catching misconfigurations early.
Build and ship high-quality production software using modern engineering practices, treating AI as a core part of the development workflow to deliver secure, optimized, high-quality code.
Help design and orchestrate complex systems where AI agents integrate into human workflows to drive efficiency and innovation at scale.
Contribute to shared system context, an explicit repository of system designs, constraints, and standards that helps AI operate accurately and reliably.
Critically evaluate code, whether human- or AI-generated, for correctness, quality, security, and performance.

Experience and qualifications

2 to 4 years of professional software development experience.
Proficiency in Go; experience with Python or Java is also acceptable.
Experience with distributed systems, microservices, and REST or gRPC APIs.
Familiarity with Kubernetes, Docker, Helm, and Terraform in a cloud environment (AWS preferred).
Understanding of software security fundamentals, including OWASP Top 10, least privilege, and secrets management.
Strong problem-solving and debugging skills in distributed, containerized systems.
Ability to work in a large-scale enterprise environment with production-safety constraints.
An AI-first approach to engineering, using AI to move faster and build fluency across the stack.
Experience using AI tools such as Claude Code, GitHub Copilot, Codex, or Cursor.
Advanced prompt engineering skills, including writing precise, structured prompts and cultivating system context for secure, production-ready outputs.
Bachelor’s degree in Computer Science, Software Engineering, or a related field, or equivalent experience.

Compensation: USD 117,200 to 176,700 per year.

Technologies you may work with

Go, Python, Java, REST, gRPC
Kubernetes, Docker, Helm, Terraform
Amazon Web Services (AWS)
Large language model (LLM) gateway services
RBAC, OWASP Top 10, secrets management
Claude Code, GitHub Copilot, Codex, Cursor
HashiCorp Vault, cloud key management services (KMS), Open Policy Agent (OPA), mTLS, IAM
NIST, ISO, SOC 2

Role context

Frontier Strike, part of EntSecTech, builds and operates the Harness Orchestrator, an autonomous AI red-teaming platform that continuously tests identity and AI-integrated systems.
This role focuses on the orchestration engine, policy gateways, and secrets-isolation systems that enable safe automated adversarial testing targeting production.
AI plays a core role in the development workflow alongside hands-on distributed-systems engineering.

Even better if…

Experience with policy engines (for example, Open Policy Agent (OPA)) or other fine-grained authorization frameworks.
Exposure to AI/LLM security, adversarial testing, or red-teaming.
Experience with secrets vault technologies (HashiCorp Vault, cloud key management services (KMS), etc.).
Familiarity with sidecar proxy or gateway patterns and mutual Transport Layer Security (mTLS).
Experience with identity and access management (IAM), cybersecurity, or compliance frameworks (NIST, ISO, SOC 2).

Location: Bellevue, WA (onsite).

If you need a reasonable accommodation during the application or recruiting process, submit a request via the Accommodations Request Form.

View full job page →

15d ago

Backend Software Engineer

Vertage Dearborn, MI

Dearborn, MI

15d ago

$80 - $85/hr Contract Backend Developer Certificate Management Cloud

Apply Now

Job Description

Vertage is hiring a Backend Software Engineer III to help build and maintain secure backend systems for cybersecurity-focused services in connected vehicle ecosystems. This contract role centers on Public Key Infrastructure (PKI), secure API development, and cryptographic services deployed across cloud and on-premises environments.

In this hybrid position in the United States, you will work across design, development, and operations to deliver backend applications, cryptographic functionality, and RESTful services that support certificate and key workflows.

Responsibilities

Design, develop, and maintain secure backend applications, APIs, and microservices.
Build and support PKI and key management capabilities including certificate issuance, lifecycle management, revocation, and encryption services.
Develop integrations with Hardware Security Modules (HSMs) using PKCS#11.
Implement security controls using OAuth, mTLS, and encryption technologies.
Design and support RESTful services for Certificate Management.
Design and support RESTful services for CRL / OCSP Services.
Design and support RESTful services for ACME Integrations.
Design and support RESTful services for Software Signing.
Design and support RESTful services for Key Rotation.
Design and support RESTful services for Encryption / Decryption Services.
Deploy and support applications in cloud and on-premises Kubernetes environments.
Participate in architecture design, code reviews, testing, security assessments, and CI/CD initiatives.
Collaborate with product owners, architects, and business stakeholders to deliver secure solutions.
Monitor application performance, reliability, security, and compliance.

Requirements

6+ years of IT experience.
4+ years of hands-on software engineering experience.
Strong experience with object-oriented programming and secure coding practices.
Experience building and supporting customer-facing applications.
Bachelor’s degree in Computer Science, Engineering, or a related field.

Technologies

C# / .NET Core; backend API and microservices development
PostgreSQL; Google Cloud Platform (GCP)
SDLC; Agile methodologies; application testing and documentation
Cybersecurity engineering and cryptographic libraries such as Bouncy Castle (or similar)
PKI and X.509 certificates, including RSA and ECC
AES cryptography; certificate lifecycle management
Hardware Security Modules (HSMs) and PKCS#11
Secure API design using OAuth and mTLS
Kubernetes; OpenShift; Redis; MongoDB
NIST and OWASP; ISO security standards
CI/CD pipeline experience; technical architecture experience

Preferred / Nice-to-have

Kubernetes or OpenShift
Redis and MongoDB
Production PKI system experience
NIST, OWASP, ISO security standards familiarity
CI/CD pipeline experience
Technical architecture experience
Automotive or connected vehicle experience
Knowledge of in-vehicle network architecture

Role Details

Location: Dearborn, MI (Hybrid, 4 days onsite / week)
Employment Type: Contract
Compensation: USD 80 to 85 per hourly
Education: Bachelor’s degree in Computer Science, Engineering, or related field

Level Signals

Cyber security: Intermediate
.NET Core: Intermediate
OpenShift: Intermediate
X.509: Intermediate
Public Key Infrastructure: Intermediate
Software engineering: Intermediate
Kubernetes: Intermediate
Microservices: Intermediate
MongoDB: Intermediate
Security engineering: Intermediate
Application programming interface: Intermediate
Certificate Management: Intermediate
Network Architecture: Intermediate
C#: Intermediate
English: Professional working proficiency

View full job page →

15d ago

Lead Software Engineer- Technical Support Engineer- Authentication & Authorization Platforms

JPMorganChase Jersey City, NJ

Jersey City, NJ

15d ago

$157k - $215k/yr Full time Authentication & Authorization Certificate Management Cloud Platforms

Apply Now

Job Description

JPMorgan Chase is seeking a Lead Software Engineer for the Authentication & Authorization Technical Support Engineering (Auth & Auth TSE) team within the Chief Technology Office. This role provides in-region, front-line technical support for identity and authentication systems, owning complex, customer-facing integration incidents end to end and delivering durable technical fixes.

Role Scope and Impact

As an in-region escalation point across the Auth & Auth portfolio, you will help strengthen resiliency for critical authentication functions. You will collaborate with engineering customers to design and validate their integrations across flow selection, federation setup, onboarding, and secure credential handling, while also providing regional escalation coverage and mentoring other engineers as needed.

Key Responsibilities

Act as a front-line, in-region technical support point across the Auth & Auth portfolio, improving resiliency for critical authentication functions.
Partner with engineering customers to design and validate integrations, including flow selection, federation setup, onboarding, and secure credential handling.
Own complex incidents spanning multiple systems, drive them to resolution, and support maintenance and release work around those incidents.
Read and write code daily, including reproductions, diagnostic tooling, and reviews of customer integration code.
Author and review runbooks and root-cause write-ups.
Provide regional escalation coverage and support efforts to bring other engineers up to speed.
Apply creative software solutions, design, development, and technical troubleshooting with the ability to address problems beyond routine approaches.
Drive adoption of enterprise-authorized AI-assisted engineering practices to improve code quality, delivery speed, and operational outcomes, including AI-assisted code review/refactoring, test strategy acceleration, and incident or root-cause analysis support.
Establish consistent validation standards such as secure coding, peer review, and automated testing, and promote reuse of effective patterns across the team.
Use tools within the software development lifecycle toolchain, including enterprise-authorized AI-assisted development and automation capabilities, to improve the value realized by automation.
Identify opportunities to eliminate or automate remediation of recurring issues to enhance operational stability of software applications and systems.

Requirements

Formal training or certification on software engineering concepts and 5+ years of applied experience.
Customer-facing solution design: proven experience working with engineering customers to understand problems and help design fixes, rather than only relaying information.
Coding and scripting proficiency: ability to read and write code to reproduce issues and review customer integrations, across languages as needed.
Technical writing and review: clear documentation and constructive review of others’ work.
Broad systems integration experience: demonstrated ability integrating across many systems, protocols, and languages, and reasoning across the full path from client to resource.
Root-cause diagnostic rigor: follow evidence such as logs, traces, and tokens rather than guessing.
Incident and release support discipline: ability to stay steady under pressure with sound escalation judgment.
Strong communication with both technical and non-technical audiences.
Advanced proficiency in one or more programming language(s).
Demonstrated experience leading effective use of approved AI-assisted software development tools for coding, code review, test acceleration, and troubleshooting, including setting expectations for validating correctness, performance, and security.
Strong understanding of responsible AI use in engineering workflows, including data sensitivity considerations, secure handling of inputs and outputs, and coaching engineers on safe and compliant adoption within delivery practices.

Technologies and Platforms

Entra
Google Cloud
AI-assisted engineering practices
x509
mTLS
PKI
Token- and assertion-based approaches
Certificate and key registration and rotation
Least privilege
Public-cloud identity providers

Benefits

Comprehensive health care coverage
On-site health and wellness centers
A retirement savings plan
Backup childcare
Tuition reimbursement
Mental health support
Financial coaching

Preferred Qualifications, Capabilities, and Skills

Experience with modern authentication and federation protocols (token- and assertion-based).
Broader IAM knowledge including auth models, certificate and key registration and rotation, onboarding, and least privilege.
Familiarity with directory services and enterprise access platforms.
Experience with federated identity across firm and public-cloud providers.
Comfort with observability tooling and PKI basics (x509, mTLS, signing-key mismatches).
In-region experience supporting high-risk locations.

Location, Experience, and Compensation

Location: Jersey City, NJ (onsite)
Experience: 5+ years required
Compensation: USD 156,750 - 215,000 per year

View full job page →

16d ago

Member of Technical Staff (MTS), Software Engineer, Identity & Access Management

Salesforce Bellevue, WA

Bellevue, WA

16d ago

$117k - $177k/yr Full time Backend Developer Ai Development APIs

Apply Now

Job Description

Salesforce Enterprise Security is looking for a Software Engineer to help build foundational Identity and Access Management (IAM) platform services. This onsite role in Bellevue, WA focuses on device trust, identity and security platform components, and secure operations supported by AI-enabled workflows.

Role Overview

In this position, you will design and deliver production-grade capabilities for IAM, including certificate-based and hardware-backed trust mechanisms. You will also contribute to core platform services such as PKI, secure transport, and access enforcement, while participating in secure operations and incident support.

Responsibilities

Build and ship high-quality, production-grade software across Linux, macOS, and Windows using modern engineering practices, with AI as a core part of the development workflow
Design and orchestrate systems where AI agents integrate into human workflows, and evaluate code for correctness, quality, security, and performance regardless of whether it is human- or AI-generated
Implement device trust and attestation capabilities, including certificate-based and hardware-backed trust mechanisms
Contribute to identity and security platform components involving certificates, Public Key Infrastructure (PKI), secure transport, and access enforcement
Deploy and maintain containerized workloads using Kubernetes and Docker, leveraging infrastructure-as-code tools such as Terraform
Support secure development workflows, including automated testing, CI/CD pipelines, and code quality and security checks
Assist with vulnerability remediation by triaging findings, validating fixes, and partnering to close security gaps quickly
Participate in incident response and operational investigations by collecting data, analyzing system behavior, and supporting remediation
Collaborate with security, infrastructure, and engineering teams to support platform reliability and trust in an Agile environment

Required Qualifications

3 years of software engineering experience
Experience building software in one or more languages such as Golang, Python, Java, or similar
A demonstrated, genuine AI-first approach to engineering, using tools such as Claude Code, GitHub Copilot, Codex, or Cursor
Understanding of distributed systems, microservices architecture, and cloud-native services
Familiarity with software fundamentals including debugging, testing, and version control with Git
Familiarity with REST/JSON APIs and service integration concepts
Understanding of CI/CD pipelines and developer workflows
Understanding of Linux or system-level development fundamentals
Interest in enterprise security, identity, authentication, and access management
Strong communication skills and willingness to collaborate and learn in a team environment
A related technical degree is required

Technologies

Golang, Python, Java
Claude Code, GitHub Copilot, Codex, Cursor
Linux, macOS, Windows
REST, JSON, Git
CI/CD, Kubernetes, Docker, Terraform
Public Key Infrastructure (PKI), certificate-based trust, hardware-backed trust mechanisms

Benefits

Time off programs
Medical, dental, and vision
Mental health support
Paid parental leave
Life and disability insurance
401(k)
Employee stock purchasing program

Additional “Even Better If” Criteria

Exposure to deploying or troubleshooting Kubernetes workloads and familiarity with infrastructure-as-code tools such as Terraform or CloudFormation
Experience with observability platforms (logging, metrics, or distributed tracing) and familiarity with reliability concepts such as SLOs and SLIs
Interest in security and identity topics such as TLS, OAuth, SAML, MFA, passkeys, and certificates; curiosity about Zero Trust, device trust, or Trusted Platform Module (TPM)/T2-based attestation
Awareness of secure coding practices including OWASP Top 10, input validation, and secrets management; exposure to security tooling such as vulnerability scanning, static analysis, or dependency scanning
Working knowledge of SQL and/or NoSQL databases and familiarity with testing frameworks
Advanced prompt engineering skills to write precise, structured prompts that make AI outputs reliable, secure, and production-ready
Relevant coursework, degree, or project experience in distributed systems, cloud infrastructure, cybersecurity, or security automation

Location and Compensation

Location: Bellevue, WA (onsite)
Salary: USD 117,200 - 176,700 per year

Accommodations

If you need a reasonable accommodation during the application or recruiting process, submit a request via the Accommodations Request Form.

Artificial Intelligence in the Recruiting Process

Salesforce uses artificial intelligence (AI) tools to help recruiters assess and evaluate candidates’ resumes and qualifications throughout the recruiting process.