Software Engineering SMTS

Salesforce•Bellevue, WA

9d•$148,500 - $223,900

About The Position

The Authentication Platform team owns Salesforce’s core identity services for production infrastructure, including the Production IAM stack. Its portfolio includes Kerberos-based authentication, TOTP, and FIDO2/WebAuthn, bridging legacy infrastructure protocols with modern cloud-native identity standards. The tier-0 platform serves the company at massive throughput, targets 4+ nines of availability, and runs across AWS/GCP public cloud and hybrid Kubernetes deployments with modern CI/CD. The team applies Zero Trust and least-privilege principles and partners with security architects on identity verification and credential-handling design. This is a hands-on individual contributor role developing services across the Production IAM stack. The engineer implements features, contributes to designs led by senior engineers, builds technical depth in identity protocols, and ships well-tested code in a security-critical environment. The position includes participation in the Authentication Platform on-call rotation, production debugging, monitoring, incident analysis, and documentation.

Requirements

Strong programming ability in Java, Go, or C#, with production experience building backend services.
Working knowledge of at least one of Kerberos, LDAP, WebAuthn/FIDO2, TOTP, SAML, or OIDC.
Experience building, deploying, and debugging distributed services in AWS, GCP, or a hybrid environment using Kubernetes and modern CI/CD.
Solid understanding of data structures, testing, code review, source control, CI/CD, and Agile execution as a team member.
Security-first approach, including least-privilege defaults, threat-aware reviews, and thorough automated testing for identity-critical systems.
Ability to debug distributed-system production issues using logs, metrics, and traces.
Ability to execute an agreed plan largely independently and escalate design-level and cross-cutting decisions to senior engineers.
At least 5 years of software engineering experience.
Master’s degree or foreign equivalent in Computer Science, Cybersecurity, Software Engineering, or a related field; a bachelor’s degree or foreign equivalent is acceptable with additional years of experience.

Nice To Haves

Deeper experience in one or more identity or federation protocols.
IAM specialist knowledge of Kerberos, LDAP, WebAuthn/FIDO2, or TOTP internals and interoperability with SAML/OIDC.
Familiarity with HSMs, PKI, and secure credential-storage patterns.
Exposure to compliance controls and evidence requirements under PCI, SOC 2, or HIPAA.
Experience on-call for a high-visibility production service and debugging live incidents under pressure.
Experience integrating AI development tools into engineering workflows, including prompt design and reviewing AI-generated code for security-critical systems.

Responsibilities

Deliver features across Kerberos, TOTP, and FIDO2/WebAuthn services, writing clean, well-tested backend code in Java, Go, or C#.
Contribute to design specifications and research spikes alongside senior engineers.
Implement identity and federation protocols, including Kerberos, LDAP, WebAuthn/FIDO2, and TOTP; support interoperation discussions involving SAML/OIDC.
Partner with the Product Owner and tech lead on story scope, sequencing, and dependencies, and clarify work items before sprint planning.
Develop, review, and test code with high test coverage, clean implementation, and a security-first mindset.
Apply Salesforce engineering practices to code, tests, and CI/CD pipelines, and improve code quality.
Use AI development tools in day-to-day work and evaluate human- and AI-generated code for correctness, performance, and security compliance.
Analyze and fix bugs, debug production issues, and work with senior engineers on complex problems.
Take ownership of feature testing, code review, and monitoring.
Participate in the Authentication Platform on-call rotation and confidently handle common alerts.
Understand platform telemetry, including metrics, logs, traces, and SLIs, and extend it for owned features.
Contribute to root cause analyses and complete assigned incident follow-up actions.
Work with internal service teams and infrastructure owners on integration questions related to owned features.
Author and maintain technical documentation and runbooks.