Principal Software Engineer
Ping Identity5 hours ago
Responsibilities
- Design, ship, and own core Go services for the PingOne Privilege cloud-native Zero Trust privileged access platform.
- Build AI security capabilities including MCP gateways, AI agent identity and governance, and real-time guardrails for prompt injection and data exfiltration.
- Develop highly available, multi-region services on Kubernetes with durable workflow orchestration and distributed data stores.
- Implement OAuth2/OIDC, SAML, SCIM, and certificate-based authentication integrations.
- Build secure proxy and gateway layers for SSH, RDP, Kubernetes, databases, and web applications.
- Lead through code and design reviews, mentor engineers, and drive cross-team technical decisions while writing production code.
Requirements
- 10+ years of hands-on software engineering experience, including 4+ years at Principal or Staff level building large-scale security or identity products.
- Expert-level Go proficiency or a strong systems-language background with willingness to work in Go.
- Deep IAM/PAM expertise covering privileged access, secrets and key management, session brokering, least privilege, Zero Trust architectures, OAuth2/OIDC, and PKI.
- Experience with AWS, Azure or GCP, Kubernetes, and distributed data stores such as Cassandra or similar NoSQL systems.
- Experience with workflow engines such as Temporal is a plus.
- Preferred experience building or securing LLM-based systems, agent frameworks, MCP, model-based threat detection, or AI guardrails.
- Proven ability to influence cross-team technical decisions through code and design while staying involved in delivery.
- BS/MS in Computer Science or equivalent practical experience.
Benefits
- Generous PTO and holiday schedule.
- Parental leave.
- Progressive healthcare options.
- Retirement programs.
- Education reimbursement opportunity.
- Commuter offset for specific locations.
- Flexible, collaborative work environment.
- Employee Resource Groups, team bonding events, and global volunteering and community initiatives.
Tech Stack
About Ping Identity
At Ping Identity, we make it possible to trust every digital moment across customers, employees, partners, and non-human identities. Whether you're securing millions of users, fighting fraud, simplifying third-party access, or going passwordless, establishing trust shouldn’t slow you down. Our enterprise-grade identity platform is built for scale, speed, and flexibility and works seamlessly with your existing cloud, hybrid, and on-prem environments. We help you confidently embrace AI and automation with Runtime Identity, so you can continuously verify the identity, context, and intent of every AI agent and control their actions in real time. With Ping, all digital experiences start with trust. Learn more at pingidentity.com.