Software Engineering SMTS

Salesforce•Bellevue, WA

About The Position

Salesforce is hiring an individual-contributor software engineer for its Authentication Platform team, which owns core identity services in the company’s Production IAM stack. The portfolio includes Kerberos-based authentication, TOTP, and FIDO2/WebAuthn, supporting production infrastructure across public cloud and hybrid Kubernetes deployments. The platform is a tier-0 dependency with a 4+ nines availability target and a Zero Trust, least-privilege security posture. This hands-on role focuses on implementing features, producing well-tested code, contributing to designs led by senior engineers, and participating in on-call operations. The engineer will work with Java, Go, or C#, develop and support identity and federation protocols, improve telemetry and documentation, and collaborate with product and infrastructure stakeholders. The role calls for reliable execution, ownership of quality and operational outcomes, and a security-first approach.

Requirements

At least 5 years of software engineering experience.
Strong programming ability and production experience building backend services in Java, Go, or C#.
Working knowledge of at least one identity or federation protocol: Kerberos, LDAP, WebAuthn/FIDO2, TOTP, SAML, or OIDC.
Experience building, deploying, and debugging distributed services in AWS, GCP, or a hybrid environment using Kubernetes and modern CI/CD.
Solid software engineering fundamentals, including data structures, testing, code review, source control, CI/CD, and Agile team execution.
Security-first approach, including least-privilege defaults, threat-aware reviews, and thorough automated testing for identity-critical systems.
Ability to debug distributed production systems using logs, metrics, and traces.
Ability to execute an agreed-upon plan largely independently and escalate design-level or cross-cutting decisions to senior engineers.
Master’s degree or foreign equivalent in Computer Science, Cybersecurity, Software Engineering, or a related field; a bachelor’s degree or foreign equivalent is acceptable with additional years of experience.

Nice To Haves

Deeper experience with one or more of Kerberos, LDAP, WebAuthn/FIDO2, TOTP, SAML, or OIDC and their interoperability.
Familiarity with HSMs, PKI, and secure credential storage patterns.
Exposure to compliance controls and evidence requirements under PCI, SOC 2, or HIPAA.
Experience on-call for a high-visibility production service and debugging live incidents under pressure.
Experience integrating AI development tools into engineering workflows, including prompt design and security-focused review of AI-generated code.

Responsibilities

Deliver features across the Authentication Platform’s Kerberos, TOTP, and FIDO2/WebAuthn services using Java, Go, or C#.
Contribute to design specifications and research spikes alongside senior engineers.
Implement identity and federation protocols, including Kerberos, LDAP, WebAuthn/FIDO2, and TOTP; support interoperability discussions involving SAML/OIDC as applicable.
Partner with the Product Owner and tech lead to scope and sequence work, identify dependencies, and clarify work items before sprint planning.
Write, test, review, and maintain clean backend code with high test coverage and a security-first mindset.
Apply Salesforce engineering best practices to code, tests, and CI/CD pipelines, and improve existing code where appropriate.
Use AI development tools and critically evaluate human- and AI-generated code for correctness, performance, and security compliance.
Analyze and fix bugs, debug production issues, and work with senior engineers on complex problems.
Participate in the Authentication Platform on-call rotation and handle common alerts.
Understand and extend platform telemetry, including metrics, logs, traces, and SLIs.
Contribute to incident root-cause analyses and complete assigned follow-up actions.
Work with internal service teams and infrastructure owners to answer integration questions about owned features.
Author and maintain technical documentation and runbooks.