Identity- Software Engineer, Principal Member Technical Staff
Salesforce2 days ago
Base Salary
$197k - $345k/yr
Responsibilities
- Architect, design, implement, test, and deliver highly scalable Java authentication and session services with strict availability and latency requirements.
- Build and evolve standards-based identity protocols and capabilities including OAuth 2.0/2.1, OpenID Connect, SAML 2.0, PKCE, DPoP, mTLS-bound tokens, token exchange, and DBSC.
- Harden sessions and credentials against hijacking, replay, phishing, and credential stuffing using token binding, refresh-token rotation, secure cookies, and step-up authentication.
- Threat-model features and remediate findings from Product Security, penetration tests, bug bounty reports, and incident reviews.
- Roll out security enforcement using feature flags, phased cohorts, telemetry, backward compatibility, and deprecation plans.
- Develop test strategies, automation frameworks, and unit, functional, negative, and abuse-case tests for authentication paths.
- Participate in on-call operations for authentication outages and security incidents and keep services highly available.
- Mentor engineers, present and review designs, improve development processes, and critically evaluate human- and AI-generated code.
- Use AI development tools and advanced prompt engineering to build reliable, secure, production-ready software and system context.
Requirements
- A related technical degree is required.
- At least 3 years of professional software development experience; senior-level candidates need 5 or more years including ownership of production services.
- Strong Java and object-oriented design skills; experience with large, multi-tenant codebases is a plus.
- Hands-on experience with at least one of OAuth 2.0, OpenID Connect, or SAML, plus a solid understanding of authentication, authorization, sessions, and token types.
- Working knowledge of applied cryptography, PKI, X.509 certificates, TLS/mTLS, JWT/JWS/JWE, key management, and cryptographic key rotation.
- Knowledge of secure coding, OWASP Top 10 risks, browser security, cookies, same-origin policy, CORS, CSP, and security headers.
- Understanding of JavaScript, HTML5, JSON, HTTP, SQL, and relational database schema design.
- Automated testing experience using Java, JUnit, and Selenium.
- Demonstrated AI-first engineering practices, experience with AI development tools, and advanced prompt engineering skills.
- Experience with scalable web applications or identity infrastructure, MFA and passwordless authentication, identity specifications, HSMs, cloud KMS, secrets management, regulated environments, or security incident work is preferred.
- Excellent interpersonal skills.
Benefits
- Hybrid Office-Flex work: three days in person per week, or 10 days per quarter for some engineering teams.
- Benefits include time off programs, medical, dental, vision, mental health support, paid parental leave, life and disability insurance, 401(k), and an employee stock purchasing program.
- Certain roles may be eligible for incentive compensation, equity, and benefits.
Tech Stack
Categories
About Salesforce
Salesforce builds cloud-based customer relationship management software and a broader Customer 360 platform for sales, service, marketing, commerce, and analytics, sold by subscription to businesses and public-sector organizations. Founded in 1999 and headquartered in San Francisco, it trades on the NYSE under the symbol CRM. Its portfolio includes Sales Cloud, Service Cloud, Marketing Cloud, MuleSoft integration, Tableau analytics, and Slack for collaboration, with extensive developer tools and APIs.