Senior Software Engineer - Identity, Data Security and Trust

Snowflake•Bellevue, WA

9d•$200,000 - $287,500

About The Position

Snowflake is hiring a Senior Software Engineer in its Identity, Data Security and Trust organization. The teams build the security backbone of Snowflake, enabling customers to use sensitive data and workloads securely, helping engineers deliver a secure platform at scale, and providing customers with tools to manage security, governance, privacy, and compliance. The role contributes to AI-native security capabilities for the agentic era. The engineer will design and build security systems and infrastructure, including controlled and audited agent workflows, agent identity and guardrails, identity and access management, secrets and key management, service identity, encryption, policy tooling, and extensible components for Snowflake's Trust Center. The role also involves security posture assessment, behavioral analytics, PII attribution, and secure network architecture. The engineer partners with teams across the company and participates in design and code reviews and on-call rotations, maintaining a high bar for quality, reliability, and technical decisions.

Requirements

At least 5 years of industry experience designing, building, and operating large-scale distributed systems in production cloud environments.
Strong foundational computer science skills, including data structures, algorithms, systems design, and distributed computing.
Proficiency in one or more of Java, C++, Python, Golang, or Rust.
Solid SQL skills for data-driven features.
Experience shipping and providing on-call support for production services, with a focus on availability, reliability, and observability.
Collaborative, low-ego approach to engineering, with the ability to iterate quickly and work across product management, design, and engineering teams.
BS in Computer Science, Computer Engineering, or a related technical discipline, or equivalent practical experience.

Nice To Haves

Knowledge of identity and access management concepts and protocols, including SAML, SCIM, OAuth, OIDC, federation, MFA, or RBAC.
Familiarity with security infrastructure domains such as secret management, key management, service identity, authentication, or authorization.
Experience with database internals, query engines, or data platform systems.
Exposure to machine learning or AI systems, particularly for anomaly detection, behavioral analytics, or risk classification.
Contributions to developer platforms, SDKs, or multi-tenant extensibility frameworks.
Experience deploying and operating services on Kubernetes or production cloud platforms such as AWS, Azure, or GCP.

Responsibilities

Design and implement AI security capabilities, including controlled and audited agent workflows, MCP server and client security, agent identity frameworks, and administrative guardrails.
Build and evolve identity and access management systems, including authentication protocols, SSO integrations, MFA, OAuth/OIDC, SAML, SCIM, and fine-grained RBAC.
Design and develop security infrastructure for secret management, key management, service identity, and end-to-end encryption in a multi-cloud environment.
Build and maintain tooling to define, monitor, enforce, and detect policy violations across the platform.
Implement automation and self-service processes that increase developer autonomy and promote secure-by-default engineering.
Design and implement extensible platform components for first-, second-, and third-party security detectors, responders, and visualizations in Snowflake's Trust Center.
Use industry-accredited benchmarks such as CIS to develop standards-based security posture assessments.
Contribute to behavioral analytics pipelines and PII attribution capabilities to detect, prevent, and respond to threats and abuse vectors.
Partner with engineering teams to understand security pain points and deliver solutions that reduce friction without compromising safety.
Lead the design and enforcement of secure network architectures to defend against ransomware and detect sophisticated data exfiltration attempts.
Participate in design reviews, code reviews, and on-call rotations while maintaining high standards for code quality, reliability, and technical decisions.