Identity Platform Engineer (MTS) - Kerberos & WebAuthn

Salesforce; Bellevue (KY); On-site; USD 117,000 - 177,000; Full time

Job summary

Salesforce is seeking a Software Engineer for the Authentication Platform (MTS) to own backend services across Kerberos, TOTP, and WebAuthn/FIDO2. You will implement identity protocols, contribute to designs, and participate in on-call rotations for a tier-0 system.

You will collaborate with product and tech leads, ship secure, well-tested code, and apply CI/CD best practices in a cloud/hybrid setup with Kubernetes. Prior ISO/PCI/HIPAA considerations may arise.

Qualifications

• Proficient in backend service development with production experience
• Knowledge of identity/federation protocols (Kerberos, LDAP, WebAuthn/FIDO2, TOTP, SAML, OIDC)
• Experience deploying and debugging distributed services in public cloud or hybrid environments with Kubernetes and modern CI/CD
• Strong fundamentals in data structures, testing, code review, source control, CI/CD, and Agile execution
• Security-first mindset with least-privilege design and automated testing for identity-critical systems
• Ability to diagnose production issues via logs, metrics, and traces
• Comfort working largely independently while escalating design-level decisions as needed

Responsibilities

• Deliver features across Kerberos, TOTP, and WebAuthn/FIDO2 in Java, Go, or C#
• Contribute to design specs and spikes with senior engineers
• Implement identity protocols and interop with SAML/OIDC
• Collaborate with Product Owner and tech lead on scope and priorities
• Deliver high-quality, well-tested code with strong reviews and security focus
• Apply Salesforce engineering practices to code, tests, and CI/CD pipelines
• Utilize AI tools in development, evaluate AI-generated code for correctness and security
• Debug production issues and drive fixes with senior engineers
• Participate in on-call rotations for the Authentication Platform
• Understand telemetry (metrics/logs/traces) and extend it for features
• Author and maintain technical docs and runbooks
• Work with internal stakeholders to answer integration questions
• Own testing, reviews, and monitoring beyond coding

Skills

Java

Go

C#

Kerberos

LDAP

WebAuthn/FIDO2

TOTP

SAML

OIDC

AWS/GCP

Kubernetes

CI/CD

Education

Master’s degree in Computer Science/Cybersecurity/Software Engineering or related field

Bachelor’s degree or foreign equivalent with additional years of experience

Job description

Salesforce is seeking a Software Engineer for the Authentication Platform (MTS) to own backend services across Kerberos, TOTP, and WebAuthn/FIDO2. You will implement identity protocols, contribute to designs, and participate in on-call rotations for a tier-0 system.

You will collaborate with product and tech leads, ship secure, well-tested code, and apply CI/CD best practices in a cloud/hybrid setup with Kubernetes. Prior ISO/PCI/HIPAA considerations may arise.