Software Engineering MTS

Salesforce•San Francisco, CA

About The Position

Salesforce is building an internal cloud platform for network security controls and management. The team develops and operates highly available, performant distributed systems that enforce network-level security policies across Salesforce’s public cloud, spanning virtual machines and containers across cloud compute substrates. The platform’s scope includes microsegmentation, network policy distribution, access control, distributed firewalls, and DDoS prevention in a multi-cloud, multi-substrate environment. The role involves designing and implementing distributed systems and microservices for network security platforms, researching security solutions for intra- and cross-region network flows, and operating the platforms using a full DevOps model. The engineer is also expected to contribute to code reviews and mentorship, ship production-grade software using modern engineering practices and AI development tools, design systems that integrate AI agents into human workflows, maintain shared system context for reliable AI-assisted work, and critically assess human- or AI-generated code for correctness, quality, security, and performance.

Requirements

At least 2 years of software development experience in SaaS, PaaS, or IaaS.
At least 2 years of experience in a high-availability, 24/7 environment; cloud platform experience is a plus.
A demonstrated AI-first approach to engineering, using AI to work faster, develop fluency across the stack, and contribute beyond one's core specialty.
Experience using AI tools in development workflows, such as Claude Code, GitHub Copilot, Codex, or Cursor.
Advanced prompt engineering skills, including writing precise, structured prompts and cultivating system context that helps produce reliable, secure, production-ready AI outputs.
Proficiency in Go, Java, C++, or Python.
A related technical degree.

Nice To Haves

Experience with network security platforms, including segmentation, ACLs, or DDoS protection.
Experience with cloud network architecture, including VPCs, security groups, NACLs, transit gateways, or PrivateLink.
Experience with cloud security services such as AWS Shield, WAF, Azure Firewall, or GCP Cloud Armor.
Experience with container networking and service mesh technologies such as Cilium or Calico.
Strong fundamentals in networking protocols (TCP/UDP, DNS, DHCP, HTTP/HTTPS) and the OSI model.
Experience with authentication frameworks such as SSO, SAML, or OAuth; secure transport such as TLS/SSL; and identity management, including certificates and PKI.
A DevOps orientation, including testing, monitoring, deploying, and maintaining the software built.

Responsibilities

Architect and implement distributed systems for network-level security controls, including policy management, ACL enforcement, distributed firewalls, and DDoS/network protection.
Develop microservices for network security platforms at cloud infrastructure and distributed platform levels.
Research and implement networking security solutions for intra- and cross-region network flows.
Operate security platforms using a full DevOps model: build and run the systems.
Promote engineering excellence through code reviews and mentorship.
Build and ship high-quality, production-grade software using modern engineering practices and AI development tools.
Design and orchestrate systems in which AI agents integrate into human workflows.
Contribute to maintaining a shared system context of system designs, constraints, and standards to support reliable AI operation.
Evaluate human- and AI-generated code for correctness, quality, security, and performance.