Senior IAM & Device Trust Engineer (SaaS)

Salesforce, Inc.; Bellevue (WA); On-site; USD 149,000 - 224,000; Full time

Benefits offered by this job

Time off programs

Medical insurance

Dental insurance

Vision insurance

Mental health support

Parental leave

Job summary

Salesforce, Inc. is seeking an experienced software engineer for the Identity and Access Management (IAM) platform team.

You will design scalable authentication and authorization services and work across Linux, macOS, and Windows environments to support Salesforce's Zero Trust and cybersecurity mesh architecture. You’ll build and operate secure, containerized workloads with Kubernetes and Docker, use Terraform for IaC, and contribute to PKI, TLS, OAuth, and SAML frameworks while maintaining

Qualifications

• 7+ years of industry experience in SaaS/PaaS/IaaS.
• 5+ years building distributed systems in high-availability environments.
• Strong experience with public cloud platforms (AWS, Azure, GCP).
• Proficiency in Golang and/or Python.

Responsibilities

• Design and build scalable authentication and authorization services for distributed environments.
• Develop and maintain system software for Linux, macOS, and Windows.
• Implement and operate large-scale security services using Golang or Python.
• Integrate TPM-based hardware trust and secure attestation mechanisms.

Skills

Distributed systems

Golang

Python

TLS

OAuth

PKI

REST

CI/CD

Linux

Windows

Education

Bachelor's degree in CS/Engineering or related field

Tools

Kubernetes

Docker

Terraform

OpenAPI/Swagger

Git

Job description

Salesforce, Inc. is seeking an experienced software engineer for the Identity and Access Management (IAM) platform team.

You will design scalable authentication and authorization services and work across Linux, macOS, and Windows environments to support Salesforce's Zero Trust and cybersecurity mesh architecture. You’ll build and operate secure, containerized workloads with Kubernetes and Docker, use Terraform for IaC, and contribute to PKI, TLS, OAuth, and SAML frameworks while maintaining