Senior Software Engineer, Identity & Security Foundation (ISF)
About The Position
The Senior Software Engineer will work on Box’s Identity and Security Foundation (ISF) team, which manages authentication across Box’s web, API, service-to-service, and single sign-on experiences and builds and operates foundational identity infrastructure. The team is extending identity and access capabilities to support AI services and secure interactions among users, applications, and AI agents while protecting customer data. The role focuses on designing, developing, and maintaining secure, scalable authentication and authorization systems and operating high-quality microservices. The engineer will provide technical guidance and mentorship, contribute identity and security expertise to company-wide architectural decisions, and participate in an on-call rotation. Box expects employees to work from their assigned office at least three days per week.
Requirements
- At least 5 years of software engineering experience.
- A degree in Computer Science or a related field, or equivalent experience.
- Strong understanding of modern authentication and authorization technologies, including MFA, SSO, OAuth 2.0, JWTs, token management, scopes, and permissions.
- Experience designing, building, and operating secure, production-grade services and RESTful APIs using microservices architectures.
- Strong proficiency in Java and working knowledge of PHP.
- Strong understanding of security best practices and the ability to design systems balancing security, performance, reliability, and user experience.
- Ability to translate product and business requirements into scalable, secure technical designs.
- Experience collaborating effectively with engineering and business leaders across teams and disciplines.
- Growth mindset and ability to leverage AI to make faster, smarter decisions and increase impact.
Nice To Haves
- Implemented solutions based on Box APIs.
- Led or contributed to open source projects.
- Contributes to developer communities such as Stack Overflow or GitHub.
Responsibilities
- Design, develop, and maintain secure, scalable authentication and authorization systems using technologies such as Java, PHP, Docker, and Kubernetes.
- Build and operate high-quality microservices supporting security capabilities such as MFA, SSO, OAuth 2.0, OIDC, JWTs, token management, scopes, and permissions.
- Provide technical guidance across multiple levels of architecture and mentor engineers on the team.
- Contribute to company-wide architectural decisions and technical reviews, bringing expertise in identity, authentication, authorization, and security.
- Participate in the on-call rotation and be available while on-call to respond to and triage issues.
Benefits
- Equity
- Benefits (specific benefits not listed)
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Senior
