Software Engineering PMTS - Cloud Infra & Security - Hyderabad

Leadout Capital; Hyderabad; Sur place; INR 4 200 000 - 7 000 000; Plein temps

Résumé du poste

Salesforce Hyderabad is seeking a Principal Member of Technical Staff to lead infrastructure and developer security guardrails across large-scale systems. You will architect and implement scalable, secure-by-default controls, governance, and automation, shaping the security posture of the engineering lifecycle with a strong AI-first mindset.

You will mentor senior engineers, drive technical strategy across teams, and deliver production-grade software with security at the center of the DevSecOps

Qualifications

• Bachelor's degree in Computer Science or related field.
• 15+ years of software/systems/security engineering delivering large-scale production systems.
• Strong in Go, Java, or Python for production-grade software.
• Deep cloud infrastructure and cloud security experience (AWS/GCP/Azure).
• Hands-on Kubernetes and cloud-native infra expertise.
• CI/CD and DevSecOps with automated security gates.
• Infrastructure as Code (Terraform, Helm, CloudFormation).
• Experience designing distributed, scalable, secure systems.
• Clear communication of complex architectures to senior audiences.

Responsabilités

• Act as technical leader for infrastructure security and guardrails across teams.
• Design scalable shift-left security in code, IaC, containers, and deployments.
• Architect security controls with actionable findings and remediation paths.
• Create policy-as-code and enforcement frameworks across gates/environments.
• Drive risk-based security engineering prioritizing high-impact risks.
• Develop security finding correlation and multi-source signal enforcement.
• Lead Kubernetes admission control and workload security engineering.
• Define reliability, scalability, performance, observability of security services.
• Own outcomes from requirements to production readiness and ops.
• Mentor engineers and raise the technical bar across the org.

Connaissances

Security architecture

Kubernetes

Go/Java/Python

Cloud security

CI/CD DevSecOps

IaC (Terraform/CloudFormation)

Security automation

Architectural leadership

Formation

Bachelor's degree in Computer Science or related

Outils

OPA/Gatekeeper

Terraform

Kubernetes Admission Controllers

Description du poste

Come join our growing Hyperforce Enterprise Security organization. We are chartered with architecting, implementing, and operating security solutions that protect Salesforce’s complex, multi-cloud technology landscape at scale. As a Principal Member of Technical Staff, you will provide technical leadership in building the next generation of infrastructure security and developer security guardrails. You will work across the software development and deployment lifecycle to identify security risks early, build scalable controls, and enable secure-by-default engineering practices without compromising developer velocity. Our team operates at the intersection of cloud security, application security, infrastructure security, DevSecOps, Kubernetes, CI/CD, and runtime security. We build and operate security guardrails that identify and prevent high-risk security issues from source code and Infrastructure as Code through CI/CD and into runtime environments. You will be expected to operate at both strategic and hands-on technical levels, defining architecture and technical direction while also diving deeply into complex engineering problems, writing production-quality code, and driving solutions from concept through deployment and operation. This role is an opportunity to shape security capabilities that operate at significant scale across Salesforce infrastructure and to influence how security is embedded throughout the engineering lifecycle.

Responsibilities

• Act as a technical leader and subject matter expert for infrastructure security and security guardrails, providing architectural direction across teams.

• Design and build scalable shift-left security capabilities that identify security risks in source code, Infrastructure as Code, containerized workloads, and deployment configurations before they reach production.

• Architect and build shift-left security controls that identify security risks early while providing developers with actionable findings and straightforward remediation paths.

• Design scalable policy-as-code and security enforcement frameworks for consistent security controls across multiple gates and environments.

• Drive risk-based security engineering by identifying exploitable, high-impact, and meaningful security risks rather than treating all scanner findings equally.

• Design mechanisms for security finding correlation, prioritization, deduplication, and enforcement when signals originate from multiple security systems.

• Lead architecture and implementation of Kubernetes admission control and workload security capabilities.

• Define technical strategies for reliability, scalability, performance, observability, fault tolerance, and operational readiness of security services.

• Establish and evolve SLIs, SLOs, telemetry, rollout strategies, and operational practices for critical security services

• Own technical outcomes across the complete lifecycle — requirements, architecture, implementation, testing, deployment, production readiness, rollout, and ongoing operations.

• Continuously identify opportunities to improve security coverage, automation, detection quality, enforcement, and developer experience.

• Establish engineering standards and best practices for reliability, scalability, observability, testing, and operational readiness of security services.

• Mentor senior engineers and raise the technical bar across the organization.

• Influence technical strategy and roadmap decisions across teams and drive initiatives from concept through production.

• Build and ship high-quality, production-grade software using modern engineering practices, with AI as a core part of your development workflow by pushing the boundaries of AI development tools to deliver secure, optimized, and high-quality code.

• Design and orchestrate complex systems where AI agents integrate seamlessly into human workflows, driving efficiency and innovation at scale.

• Contribute to building and maintaining the shared system context, an explicit repository of system designs, constraints, and standards that enables AI to operate accurately and reliably.

• Critically evaluate code (human or AI-generated) for correctness, quality, security, and performance.

Basic Qualifications

• Bachelor's degree in Computer Science, a related technical field involving software/systems engineering, or equivalent practical experience.

• 15+ years of software engineering, systems engineering, security engineering with significant experience designing and delivering large-scale production systems.

• Strong programming experience in one or more languages such as Go, Java, or Python, with the ability to design, implement, debug, and review production-quality systems.

• Deep understanding of cloud infrastructure and cloud security, including experience with AWS, GCP, or Azure.

• Strong hands-on experience with Kubernetes, containers, and cloud-native infrastructure.

• Strong understanding of CI/CD architecture and DevSecOps, including deployment pipelines, security gates, policy enforcement, and automation.

• Proven experience with Infrastructure as Code, such as Terraform, Helm, CloudFormation, or equivalent technologies.

• Experience designing distributed, highly scalable, reliable, and secure systems.

• Strong understanding of security engineering concepts including vulnerability management, configuration security, policy enforcement, workload security, identity/access controls, and risk assessment.

• Demonstrated ability to take ambiguous security problems, identify the core technical challenge, and drive an architecture and implementation to completion.

• Strong written and verbal communication skills, including the ability to explain complex architectures and trade-offs to senior technical and business audiences.

• Preferred Qualifications

• Deep experience in cloud-native security, DevSecOps, infrastructure security, or application security.

• Experience building security platforms/services or guardrails that operate at large enterprise scale.

• Experience with Kubernetes Admission Controllers, admission policies, OPA/Gatekeeper, Kyverno, or similar policy enforcement technologies.

• Experience with policy-as-code and security-as-code frameworks.

• Experience with IaC security and tools such as Checkov, OPA, Terraform security scanning, or equivalent technologies.

• Strong understanding of container and workload security, including Seccomp, Linux security mechanisms, container isolation, and runtime security.

• Experience building systems that correlate security signals from multiple sources and prioritize findings based on risk, exploitability, exposure, and business impact.

• Experience with vulnerability management, cloud security posture management, container security, or automated security remediation.

• Experience designing developer-facing security products with a strong focus on actionable findings, low friction remediation, and developer experience.

• Experience designing security controls across the complete lifecycle: source → IaC → CI/CD → deployment → admission → runtime.

• Strong understanding of cloud networking, identity, workload architecture, and distributed systems.

• Experience driving technical strategy across multiple engineering organizations.

• Demonstrated ability to identify new security opportunities and turn them into scalable engineering solutions.

• Experience mentoring senior engineers and serving as a technical leader for complex, multi-team initiatives.

• A demonstrated, genuine AI-first approach to engineering — using AI to move faster, build fluency across the stack, and contribute well beyond your core specialty.

• Experience using AI tools (e.g., Claude Code, GitHub Copilot, Codex, Cursor, etc.) in development workflows.

• Advanced prompt engineering skills and the ability to write precise, structured prompts and cultivate the system context that makes AI outputs reliable, secure, and production-ready

What Success Looks Like

• In this role, you will be expected to:

• Raise the technical bar for infrastructure and developer security engineering.

• Build security controls that are effective, scalable, reliable, and developer-friendly.

• Move security closer to the point where risks are introduced through strong shift-left and automated enforcement.

• Improve the ability to distinguish noise from meaningful and exploitable risk.

• Establish consistent security coverage and enforcement across the software delivery lifecycle.

• Drive complex initiatives from architecture and design through implementation, production deployment, and operational maturity.

• Identify gaps in the current security landscape and proactively develop innovative solutions to address them.