(USA) Software Engineer III, Information Security

Walmart•Herndon, VA

4h•Onsite

About The Position

The Software Engineer III, Information Security, provides advanced support for enterprise security services by troubleshooting, analyzing, and resolving complex issues. This role involves designing and implementing security solutions, coordinating with stakeholders, and leading critical incident response efforts. The position requires expertise in software development, system performance monitoring, and security protocols, ensuring alignment with business needs and compliance standards. The engineer contributes to continuous improvement initiatives, documentation, and knowledge sharing, supporting Walmart’s commitment to secure, reliable technology operations and fostering a culture of integrity and excellence. The Information Security team is dedicated to ensuring customers can shop confidently, knowing their data is protected. Tackling complex cybersecurity challenges, the team applies advanced skills in cryptography, intrusion detection, and infrastructure security to safeguard one of the world’s largest e-commerce platforms. Members demonstrate creativity and technical expertise to modernize cryptographic operations and enhance security measures at scale. This team fosters collaboration and continuous improvement, leveraging cutting-edge technologies and best practices to maintain robust protection and support Walmart’s commitment to secure and reliable digital experiences.

Requirements

3–5 years of software engineering experience, including SRE, platform engineering, or infrastructure-focused role
Experience with certificate lifecycle management, CLM platforms, PKI, and TLS certificate troubleshooting
Strong systems thinking, with a deep understanding of infrastructure architecture, distributed workflows, and building resilient, automated platforms at enterprise scale
A systems-first mindset, with the ability to think in terms of infrastructure boundaries, data flows, and platform capabilities beyond application logic alone
Proficiency in Java, Python or Go
Familiarity with observability concepts, including metrics, logs, and traces
Experience with cloud platforms such as GCP or Azure, and containerized environments
Strong understanding of Cryptographic protocols (like TLS, SSH), algorithms and their implementations
Bachelor’s degree in Computer Science, Information Technology, or related field and 3 years' experience in information technology within the past 7 years OR 5 years' experience in information technology or related field within the past 7 years OR a Master's degree in Computer Science, Information Technology, or related field.

Nice To Haves

Certified Intrusion analyst (GCIAs), GIAC Certified Enterprise Defender (GCED), Certified Geographic Information Systems Professional (GISP), GIAC Certified Incident Handler (GCIH), Certified Information Systems Security Professional (CISSP), Certified Secure Software Lifecycle Professional (CSSLP), Certified Information Systems Auditor (CISA), and/or Security+ certification
Mainframe Technology
Programming language or languages (for example, Java, C/C++, .NET, Rexx, Cobol, Powershell)
SAP
Version control software (for example, Subversion, Git, Librarian)
Working as a project or team lead
Writing SQL queries in a database platform (for example, Oracle, DB2, SQL Server)

Responsibilities

Help shape and execute standards, reference architectures, and best practices for cryptography, PKI, and key management across the enterprise
Drive modernization of certificate lifecycle management by building internal tools, advancing automation, and delivering analytics that improve visibility, reliability, and operational efficiency
Partner closely with platform, infrastructure, and application teams to solve complex pain points and deliver scalable tooling solutions
Apply broad technical depth to deliver well-documented, production-ready changes that minimize operational risk and improve service resilience
Influence Information Security stakeholders by communicating standards, guidance, and best practices that raise the bar for secure and reliable platform operations