Software Engineering PMTS - Cloud Infra & Security - Hyderabad

SalesForce-ad; Hyderabad; On-site; INR 4,000,000 - 6,000,000; Full time

Job summary

Salesforce is seeking a Principal Member of Technical Staff to lead security across the Hyperforce Enterprise Security organization. You will architect and operate security guardrails, drive secure-by-default engineering practices, and enable scalable protections at multi-cloud scale.

You will work across SDLC to identify risks early, build scalable controls, and push secure solutions from concept through production.

Qualifications

• Bachelor's degree in Computer Science or related field or equivalent practical experience.
• 15+ years of software engineering, systems engineering, security engineering with large-scale production systems.
• Strong programming experience in Go, Java, or Python.
• Deep understanding of cloud infrastructure and cloud security (AWS, GCP, or Azure).
• Strong hands-on experience with Kubernetes, containers, and cloud-native infra.
• Strong understanding of CI/CD architecture and DevSecOps, including deployment pipelines, security gates, policy enforcement, and automation.
• Proven experience with Infrastructure as Code (Terraform, Helm, CloudFormation).
• Experience designing distributed, highly scalable, reliable, and secure systems.
• Strong understanding of security engineering concepts including vulnerability management, configuration security, policy enforcement, workload security, identity/access controls, and risk assessment.

Responsibilities

• Act as a technical leader and SME for infrastructure security and security guardrails across teams.
• Design and build scalable shift-left security capabilities for code, IaC, containers, and configs.
• Architect and build shift-left security controls with actionable findings for developers.
• Design policy-as-code and security enforcement frameworks across gates and environments.
• Drive risk-based security engineering by prioritizing high-impact risks.
• Lead architecture for Kubernetes admission controls and workload security.
• Define strategies for reliability, scalability, performance and ops readiness of security services.
• Own outcomes across requirements, architecture, implementation, testing, deployment, and operations.
• Mentor senior engineers and raise technical bar across the organization.
• Build AI-enabled security infrastructure and guardrails for large-scale enterprise use.
• Contribute to system context repository of designs, constraints, and standards.
• Critically evaluate code (human or AI-generated) for correctness, quality, security.

Skills

Go

Java

Python

Kubernetes

CI/CD

DevSecOps

Security engineering

IaC

Terraform

Helm

CloudFormation

OPA/Gatekeeper

Kyverno

AI-first engineering

Code security reviews

Education

Bachelor's degree in Computer Science or related field

Tools

Kubernetes

Terraform

Helm

CloudFormation

OPA/Gatekeeper

Job description

Description

Come join our growing Hyperforce Enterprise Security organization. We are chartered with architecting, implementing, and operating security solutions that protect Salesforce's complex, multi-cloud technology landscape at scale.

Come join our growing Hyperforce Enterprise Security organization. We are chartered with architecting, implementing, and operating security solutions that protect Salesforce's complex, multi-cloud technology landscape at scale. As a Principal Member of Technical Staff, you will provide technical leadership in building the next generation of infrastructure security and developer security guardrails. You will work across the software development and deployment lifecycle to identify security risks early, build scalable controls, and enable secure-by-default engineering practices without compromising developer velocity. Our team operates at the intersection of cloud security, application security, infrastructure security, DevSecOps, Kubernetes, CI/CD, and runtime security. We build and operate security guardrails that identify and prevent high-risk security issues from source code and Infrastructure as Code through CI/CD and into runtime environments. You will be expected to operate at both strategic and hands-on technical levels, defining architecture and technical direction while also diving deeply into complex engineering problems, writing production-quality code, and driving solutions from concept through deployment and operation. This role is an opportunity to shape security capabilities that operate at significant scale across Salesforce infrastructure and to influence how security is embedded throughout the engineering lifecycle.

Responsibilities

• Act as a technical leader and subject matter expert for infrastructure security and security guardrails, providing architectural direction across teams.
• Design and build scalable shift-left security capabilities that identify security risks in source code, Infrastructure as Code, containerized workloads, and deployment configurations before they reach production.
• Architect and build shift-left security controls that identify security risks early while providing developers with actionable findings and straightforward remediation paths.
• Design scalable policy-as-code and security enforcement frameworks for consistent security controls across multiple gates and environments.
• Drive risk-based security engineering by identifying exploitable, high-impact, and meaningful security risks rather than treating all scanner findings equally.
• Design mechanisms for security finding correlation, prioritization, deduplication, and enforcement when signals originate from multiple security systems.
• Lead architecture and implementation of Kubernetes admission control and workload security capabilities.
• Define technical strategies for reliability, scalability, performance, observability, fault tolerance, and operational readiness of security services.
• Establish and evolve SLIs, SLOs, telemetry, rollout strategies, and operational practices for critical security services.
• Own technical outcomes across the complete lifecycle - requirements, architecture, implementation, testing, deployment, production readiness, rollout, and ongoing operations.
• Continuously identify opportunities to improve security coverage, automation, detection quality, enforcement, and developer experience.
• Establish engineering standards and best practices for reliability, scalability, observability, testing, and operational readiness of security services.
• Mentor senior engineers and raise the technical bar across the organization.
• Influence technical strategy and roadmap decisions across teams and drive initiatives from concept through production.
• Build and ship high-quality, production-grade software using modern engineering practices, with AI as a core part of your development workflow by pushing the boundaries of AI development tools to deliver secure, optimized, and high-quality code.
• Design and orchestrate complex systems where AI agents integrate seamlessly into human workflows, driving efficiency and innovation at scale.
• Contribute to building and maintaining the shared system context, an explicit repository of system designs, constraints, and standards that enables AI to operate accurately and reliably.
• Critically evaluate code (human or AI-generated) for correctness, quality, security, and performance.

Basic Qualifications

• Bachelor's degree in Computer Science, a related technical field involving software/systems engineering, or equivalent practical experience.
• 15+ years of software engineering, systems engineering, security engineering with significant experience designing and delivering large-scale production systems.
• Strong programming experience in one or more languages such as Go, Java, or Python, with the ability to design, implement, debug, and review production-quality systems.
• Deep understanding of cloud infrastructure and cloud security, including experience with AWS, GCP, or Azure.
• Strong hands-on experience with Kubernetes, containers, and cloud-native infrastructure.
• Strong understanding of CI/CD architecture and DevSecOps, including deployment pipelines, security gates, policy enforcement, and automation.
• Proven experience with Infrastructure as Code, such as Terraform, Helm, CloudFormation, or equivalent technologies.
• Experience designing distributed, highly scalable, reliable, and secure systems.
• Strong understanding of security engineering concepts including vulnerability management, configuration security, policy enforcement, workload security, identity/access controls, and risk assessment.
• Demonstrated ability to take ambiguous security problems, identify the core technical challenge, and drive an architecture and implementation to completion.
• Strong written and verbal communication skills, including the ability to explain complex architectures and trade-offs to senior technical and business audiences.
• Preferred Qualifications
• Deep experience in cloud-native security, DevSecOps, infrastructure security, or application security.
• Experience building security platforms/services or guardrails that operate at large enterprise scale.
• Experience with Kubernetes Admission Controllers, admission policies, OPA/Gatekeeper, Kyverno, or similar policy enforcement technologies.
• Experience with policy-as-code and security-as-code frameworks.
• Experience with IaC security and tools such as Checkov, OPA, Terraform security scanning, or equivalent technologies.
• Strong understanding of container and workload security, including Seccomp, Linux security mechanisms, container isolation, and runtime security.
• Experience building systems that correlate security signals from multiple sources and prioritize findings based on risk, exploitability, exposure, and business impact.
• Experience with vulnerability management, cloud security posture management, container security, or automated security remediation.
• Experience designing developer-facing security products with a strong focus on actionable findings, low friction remediation, and developer experience.
• Experience designing security controls across the complete lifecycle: source -> IaC -> CI/CD -> deployment -> admission -> runtime.
• Strong understanding of cloud networking, identity, workload architecture, and distributed systems.
• Experience driving technical strategy across multiple engineering organizations.
• Demonstrated ability to identify new security opportunities and turn them into scalable engineering solutions.
• Experience mentoring senior engineers and serving as a technical leader for complex, multi-team initiatives.
• A demonstrated, genuine AI-first approach to engineering - using AI to move faster, build fluency across the stack, and contribute well beyond your core specialty.
• Experience using AI tools (e.g., Claude Code, GitHub Copilot, Codex, Cursor, etc.) in development workflows.
• Advanced prompt engineering skills and the ability to write precise, structured prompts and cultivate the system context that makes AI outputs reliable, secure, and production-ready

What Success Looks Like

In this role, you will be expected to:

• Raise the technical bar for infrastructure and developer security engineering.
• Build security controls that are effective, scalable, reliable, and developer-friendly.
• Move security closer to the point where risks are introduced through strong shift-left and automated enforcement.
• Improve the ability to distinguish noise from meaningful and exploitable risk.
• Establish consistent security coverage and enforcement across the software delivery lifecycle.
• Drive complex initiatives from architecture and design through implementation, production deployment, and operational maturity.
• Identify gaps in the current security landscape and proactively develop innovative solutions to address them.