Identity Security Engineer - AI-Driven Auth

Salesforce, Inc.; Bellevue (WA); Hybrid; USD 197,000 - 345,000; Full time

Benefits offered by this job

Office-Flex: In-person 3 days per week

Job summary

Salesforce, Inc. is seeking a senior software engineer to architect and deliver scalable authentication and session services.

You will advance standards-based identity protocols (OAuth 2.0/2.1, OpenID Connect, SAML 2.0) and harden credentials against attacks, while mentoring teammates and contributing to secure development practices. You will join an Authentication Core team supporting login, MFA, and integrated security across global scale.

Qualifications

• Related technical degree required.
• 3+ years of professional software development experience (Senior Level: 5+ years).
• Strong Java and object-oriented design skills; experience with large, multi-tenant codebases is a plus.
• Hands-on experience with OAuth 2.0, OpenID Connect, or SAML.
• Knowledge of cryptography, TLS/mTLS, and secure- coding practices.
• Experience in automated testing including unit and functional testing with Java, JUnit, and Selenium.
• Office-Flex: Work in-person three days per week; or 10 days per quarter for some engineering teams.

Responsibilities

• Architect, design, implement, test, and deliver highly scalable authentication and session services on Salesforce Core (Java).
• Build and evolve standards-based identity protocols including OAuth 2.0/2.1, OpenID Connect, SAML 2.0, PKCE, and mTLS-bound tokens.
• Harden sessions and credentials against hijacking and phishing using secure cookie design and rotation.
• Threat-model new features, fix findings from tests, bug bounty, and incident reviews.
• Roll out security enforcement safely with feature flags, phased cohorts, and deprecation plans.
• Mentor others in development technologies and secure-coding practices.
• Participate in on-call rotation to address authentication outages and security incidents.
• Design and orchestrate complex systems where AI agents integrate into human workflows.

Skills

Java

OAuth 2.0

OpenID Connect

SAML

Cryptography

Secure coding

AI-first engineering

Team leadership

Education

Related technical degree

Tools

JUnit

Selenium

GitHub Copilot

Job description

Salesforce, Inc. is seeking a senior software engineer to architect and deliver scalable authentication and session services.

You will advance standards-based identity protocols (OAuth 2.0/2.1, OpenID Connect, SAML 2.0) and harden credentials against attacks, while mentoring teammates and contributing to secure development practices. You will join an Authentication Core team supporting login, MFA, and integrated security across global scale.