Senior IAM Engineer: Device Trust & Zero Trust Platform

Salesforce, Inc.; New York (NY); On-site; USD 149,000 - 224,000; Full time

Benefits offered by this job

Time off

Medical

Dental

Vision

Mental health support

Parental leave

Life and disability insurance

401(k)

Employee stock purchase program

Job summary

Salesforce is seeking a Software Engineer for the Identity and Access Management platform. You will design and operate scalable authentication/authorization services across Linux, macOS, and Windows environments, using Golang or Python.

Join a high-visibility, policy-driven security effort underpinning Salesforce's Zero Trust architecture. You will work in a cross-functional Agile team, implementing TPM-based attestation, PKI, and secure transport, while leveraging Kubernetes, Terraform, and

Qualifications

• 7+ years in industry, 5+ years building distributed SaaS/PaaS/IaaS systems
• 5+ years in high-availability production environments (99.999% uptime)
• Strong design/operation experience of distributed systems on AWS, GCP, or Azure
• Proficiency in Golang and/or Python
• Security protocols and identity frameworks: TLS, OAuth, SAML, PKI, certificates
• Familiar with REST and OpenAPI/Swagger
• Solid DevOps practices, CI/CD, monitoring, production ownership
• Experience with Linux and/or Windows platforms
• Experience with container tech: Docker, Kubernetes
• Proficient in Git or similar version control
• Familiarity with CI/CD tools like Jenkins or AWS CodePipeline
• Understanding of large-scale IaaS platforms (AWS/Azure/OpenStack)

Responsibilities

• Design and build scalable authentication and authorization services for distributed environments.
• Develop and maintain system software for Linux, macOS, Windows.
• Implement and operate large-scale security services using Golang or Python.
• Integrate TPM-based hardware trust and device attestation mechanisms.
• Contribute to PKI, certificates, and secure transport implementations.
• Build and manage containerized workloads with Kubernetes and Terraform.
• Operate and maintain services in a full DevOps model (monitoring, troubleshooting).
• Collaborate with security, infrastructure, and engineering teams to ensure platform integrity.

Skills

Distributed systems design

Golang

Python

Public cloud (AWS/GCP/Azure)

TLS/OAuth/SAML/PKI

REST/OpenAPI/Swagger

CI/CD

Docker

Kubernetes

Linux/Windows

DevOps ownership

Education

Related technical degree

Tools

Docker

Kubernetes

Terraform

Jenkins

AWS CodePipeline/CodeBuild

Job description

Salesforce is seeking a Software Engineer for the Identity and Access Management platform. You will design and operate scalable authentication/authorization services across Linux, macOS, and Windows environments, using Golang or Python.

Join a high-visibility, policy-driven security effort underpinning Salesforce's Zero Trust architecture. You will work in a cross-functional Agile team, implementing TPM-based attestation, PKI, and secure transport, while leveraging Kubernetes, Terraform, and