Base Salary
$200k - $288k/yr
Responsibilities
- Design and implement AI security capabilities including controlled and audited agent workflows, MCP server and client security, agent identity frameworks, and administrative guardrails.
- Build and evolve identity and access management systems supporting authentication, SSO, MFA, OAuth/OIDC, SAML, SCIM, and fine-grained RBAC at large scale.
- Develop security infrastructure for secret management, key management, service identity, and end-to-end encryption across a multi-cloud environment.
- Build tooling and automation to define, monitor, enforce, and detect security policy violations while enabling secure-by-default engineering.
- Create extensible platform components for security detectors, responders, and visualizations in Snowflake Trust Center.
- Develop standards-based security posture assessments using benchmarks such as CIS and contribute to behavioral analytics and PII attribution capabilities.
- Partner with engineering teams to solve security pain points and reduce friction without compromising safety.
- Lead secure network architecture design and enforcement to defend against ransomware and detect sophisticated data exfiltration attempts.
- Participate in design reviews, code reviews, and on-call rotations while maintaining high standards for code quality, reliability, and technical decision-making.
Requirements
- At least 5 years of industry experience designing, building, and operating large-scale distributed systems in production cloud environments.
- Strong knowledge of data structures, algorithms, systems design, and distributed computing.
- Proficiency in one or more of Java, C++, Python, Golang, or Rust, along with solid SQL skills.
- Experience shipping and operating production services with emphasis on availability, reliability, and observability.
- Bachelor’s degree in Computer Science, Computer Engineering, or a related technical discipline, or equivalent practical experience.
- Knowledge of identity and access management concepts and protocols such as SAML, SCIM, OAuth, OIDC, Federation, MFA, or RBAC is preferred.
- Familiarity with secret management, key management, service identity, authentication, and authorization is preferred.
- Experience with database internals, query engines, data platforms, developer platforms, SDKs, or multi-tenant extensibility frameworks is preferred.
- Exposure to machine learning or AI systems for anomaly detection, behavioral analytics, or risk classification is preferred.
- Experience deploying and operating services on Kubernetes or AWS, Azure, or GCP is preferred.
About Snowflake
**Snowflake is proud to be the Official Data Collaboration Provider for LA28 and Team USA.** Snowflake delivers the AI Data Cloud — a global network where thousands of organizations mobilize data with near-unlimited scale, concurrency, and performance. Inside the AI Data Cloud, organizations unite their siloed data, easily discover and securely share governed data, and execute diverse analytic workloads. Wherever data or users live, Snowflake delivers a single and seamless experience across multiple public clouds. Snowflake’s platform is the engine that powers and provides access to the AI Data Cloud, creating a solution for data warehousing, data lakes, data engineering, data science, data application development, and data sharing. Join Snowflake customers, partners, and data providers already taking their businesses to new frontiers in the AI Data Cloud.