Lead Full Stack Security (Systems & Software) Engineering (GRC)

Salesforce; Washington; On-site; USD 180,000 - 260,000; Full time

Job summary

Salesforce, Inc. is seeking a Lead Full Stack Engineer to own the architecture and delivery of a cloud-native GRC platform. You will guide multi-system initiatives, shape technical direction, and drive policy/ compliance engines with AI-enabled development practices.

You will mentor distributed teams, set high standards for security and CI/CD, and collaborate with product, security, and GRC leadership to align technical roadmaps with regulatory requirements.

Qualifications

• 10+ years in full stack software and systems engineering.
• 3+ years in Lead/Staff/Principal roles leading distributed teams.
• Proven SaaS/enterprise platform delivery from inception to production.
• Ability to break down ambiguous business requirements.
• Strong collaboration across product, security, and engineering.

Responsibilities

• Take ownership of complex multi-system initiatives and drive architecture and roadmaps.
• Architect cloud-native microservices for compliance telemetry and risk evaluation.
• Collaborate with PM, Security, and GRC to translate strategy into roadmaps.
• Set engineering standards, review code/architecture, and enforce CI/CD benchmarks.
• Design Policy as Code and Compliance as Code engines using OPA and CSPM/EDR.
• Define AI-coding guardrails with declarative rules.
• Build automated evidence pipelines across AWS, Azure, GCP and tools like Workday/NetSuite.
• Map evidence to standards (NIST 800-53, ISO 27001, SOC 2).
• Deliver high-quality software with AI integrated into development.
• Design AI-integrated workflows easing human-computer collaboration.
• Maintain shared system context repository of designs and standards.
• Evaluate code quality and security for human and AI outputs.
• Drive adoption of AI assistants (Claude, Gemini, OpenAI APIs) across teams.
• Mentor engineers across time zones; foster technical excellence.
• Lead cross-functional discussions in asynchronous environment.

Skills

Full stack engineering

Technical leadership

Architectural design

Mentoring

AI tooling

Tools

Open Policy Agent (OPA)

Cloud platforms (AWS/Azure/GCP)

CI/CD tooling

Security tooling

Job description

To get the best candidate experience, please consider applying for a maximum of 3 roles within 12 months to ensure you are not duplicating efforts.

Job Category

Software Engineering

Job Details

About Salesforce

Salesforce is the #1 AI CRM, where humans with agents drive customer success together. Here, ambition meets action. Tech meets trust. And innovation isn't a buzzword - it's a way of life. The world of work as we know it is changing and we're looking for Trailblazers who are passionate about bettering business and the world through AI, driving innovation, and keeping Salesforce's core values at the heart of it all.

Ready to level-up your career at the company leading workforce transformation in the agentic era? You're in the right place! Agentforce is the future of AI, and you are the future of Salesforce.

The Experience

Join the team building the next-generation Security Assurance Governance, Risk, and Compliance (GRC) platform at Salesforce. As a lead full stack engineer, you own the architecture, technical roadmap, and delivery of the platform's core engines, including policy as code, compliance as code, automated evidence collection, telemetry and alerting, and risk evaluation. You guide distributed feature teams from concept through deployment and shape how AI coding assistants are used across the engineering organization to raise both speed and code quality.

What You'll Actually Be Doing

Take technical ownership of complex, multi-system initiatives, driving architectural decisions, technical specifications, phase planning, and execution across the delivery lifecycle.

Architect resilient, cloud-native microservice architectures that process large-scale compliance telemetry, support automated evidence ingestion, and run low-latency risk evaluation engines.

Partner with Product Management, Security Architects, and GRC leaders to translate business and regulatory strategies into detailed technical roadmaps, milestones, and sprint backlogs.

Establish engineering standards, perform high-impact code and architecture reviews, enforce secure coding guidelines, and set rigorous continuous integration and continuous delivery (CI/CD) and testing benchmarks across the engineering organization.

Design and implement extensible Policy as Code and Compliance as Code engines, using Open Policy Agent (OPA) or custom evaluation frameworks, along with runtime platforms such as Cloud Security Posture Management (CSPM) and Endpoint Detection and Response (EDR) tools, that dynamically audit infrastructure and enterprise controls.

Constrain the outputs of AI coding assistants with declarative, machine-readable rules.

Lead the design of automated evidence collection pipelines that integrate with multi-cloud environments (Amazon Web Services (AWS), Microsoft Azure, and Google Cloud Platform (GCP)), identity providers, enterprise security tools, CI/CD pipelines, ticketing systems, and corporate productivity applications such as Workday and NetSuite.

Build dynamic risk analysis engines and auditing interfaces that map continuous technical evidence against major regulatory standards, including National Institute of Standards and Technology (NIST) Special Publication 800-53, International Organization for Standardization (ISO) 27001, and System and Organization Controls (SOC) 2.

Build and ship high-quality, production-grade software using modern engineering practices, with AI as a core part of your development workflow, pushing the boundaries of AI development tools to deliver secure, optimized, and high-quality code.

Design and orchestrate complex systems where AI agents integrate seamlessly into human workflows, driving efficiency and innovation at scale.

Contribute to building and maintaining shared system context, an explicit repository of system designs, constraints, and standards that enables AI to operate accurately and reliably.

Critically evaluate code, whether human- or AI-generated, for correctness, quality, security, and performance.

Lead the adoption and integration of AI coding assistants, such as Claude, Gemini, and OpenAI application programming interfaces (APIs), across the engineering lifecycle to improve team productivity, automate test generation, and streamline refactoring.

Mentor senior and mid-level engineers across time zones, fostering a culture of technical excellence, accountability, and continuous learning.

Lead cross-functional alignment and technical discussions across a geographically dispersed team that works in an asynchronous-first culture.

You're Our Person If...

10 to 12+ years of professional full stack software and systems engineering experience, including 3+ years in a Lead, Staff, or Principal Engineer capacity leading technical projects and distributed engineering teams.

A proven record of taking complex Software as a Service (SaaS) platforms or enterprise software projects from architectural inception to production delivery.

The ability to break down ambiguous business requireme