Elasticsearch Security Architect – Principal Engineer

Elasticsearch B.V.; United States; On-site; USD 159,800 - 252,800; Full time

Benefits offered by this job

Health coverage

Flexible locations

Generous vacation days

Donation matching

Volunteer hours

Parental leave

Job summary

Elastic is seeking a Principal Software Engineer to lead the architecture and design of Elasticsearch's core security features, including authentication, authorization, and tenant isolation. You will collaborate with engineering and product leaders to deliver high-performance security at scale.

You will own security initiatives from architecture to production, mentor engineers, and drive vulnerabilities with the InfoSec team, while applying AI-enabled tools to streamline security workflows.

Qualifications

• Deep knowledge of Java internals and JVM memory management.
• Experience designing scalable authorization models (RBAC/ABAC).
• Experience with token validation and distributed caches.
• Familiarity with OAuth 2.0 and SAML.

Responsibilities

• Own security initiatives from architecture to production, delivering major features.
• Develop foundational security models for complex features.
• Optimize security performance at scale in distributed environments.
• Apply cryptographic solutions for customer use cases.
• Ensure data isolation within shared infrastructure.
• Monitor and apply latest security practices (auth, identity, crypto).
• Collaborate to embed security in new features from the start.
• Lead vulnerability management with the InfoSec team.
• Leverage AI tools to streamline security triage and investigation.
• Mentor and coach engineers to foster security-first development.

Skills

Java internals & JVM memory management

Concurrency & lock-free design

RBAC/ABAC design

Token validation pipelines

Distributed cache invalidation

OAuth 2.0 & SAML

AI-assisted development

Async cross-team collaboration

Distributed security in systems

Leadership of distributed teams

Job description

Elastic is seeking a Principal Software Engineer to lead the architecture and design of Elasticsearch's core security features, including authentication, authorization, and tenant isolation. You will collaborate with engineering and product leaders to deliver high-performance security at scale.

You will own security initiatives from architecture to production, mentor engineers, and drive vulnerabilities with the InfoSec team, while applying AI-enabled tools to streamline security workflows.