Senior Enterprise IAM Engineer – AI-Driven Security

Salesforce; Bellevue (WA); On-site; USD 148,500 - 223,900; Full time

Job summary

Salesforce is seeking an experienced software engineer to join the Enterprise Security Engineering team, building scalable IAM services and APIs across cloud and on‑prem environments.

You will design, implement, and operate systems for identity lifecycle, access requests, PAM, and secure SDLC practices, collaborating with cross‑functional teams and mentoring junior engineers. An AI‑first approach is encouraged.

Qualifications

• 5+ years of professional software development experience in SaaS/PaaS/IaaS environments.
• Strong backend skills in Java/Go/Python and frontend with React.
• Solid IAM domain knowledge: authentication, authorization, RBAC, entitlement models, and JD/SoD concepts.

Responsibilities

• Design, build, and operate scalable IAM services and APIs.
• Develop PAM capabilities including credential vaulting, rotation, and just-in-time access.
• Model and secure non-human identities like service accounts and workloads.
• Develop full-stack features and admin experiences for IAM.
• Work with Kubernetes, Docker, and Terraform; adopt a DevOps model.
• Integrate identity sources via SCIM, REST, and event-driven patterns.
• Collaborate with governance/compliance to embed SOX/NIST/SOC 2 controls.
• Write secure code, participate in reviews, and promote SDLC best practices.
• Mentor junior engineers and drive technical direction across the platform.
• Contribute to AI-enabled development workflows and maintain system context.

Skills

Distributed systems

Java

Go

Python

React

IAM

OAuth 2.0

OIDC

SAML

Terraform

Docker

Kubernetes

CI/CD

Education

Bachelor's degree in Computer Science, Engineering, or related field

Tools

Terraform

Docker

Kubernetes

OpenAPI/Swagger

Job description

Salesforce is seeking an experienced software engineer to join the Enterprise Security Engineering team, building scalable IAM services and APIs across cloud and on‑prem environments.

You will design, implement, and operate systems for identity lifecycle, access requests, PAM, and secure SDLC practices, collaborating with cross‑functional teams and mentoring junior engineers. An AI‑first approach is encouraged.