Senior Identity & Security Software Engineer

Box Com; Redwood City (CA); Hybrid; USD 180,000 - 240,000; Full time

Job summary

Box is seeking a senior software engineer for the Identity and Security Foundation in Redwood City. You will design and implement secure authentication and authorization systems, build scalable microservices, and guide engineers to raise security and engineering standards.

This role emphasizes collaboration across teams and on-call responsiveness. Ideal candidates have 5+ years of software engineering experience, strong Java and PHP skills, and deep knowledge of MFA, SSO, OAuth 2.0, OIDC, and

Qualifications

• 5+ years of software engineering experience or equivalent.
• Strong understanding of modern authentication and authorization technologies (MFA, SSO, OAuth 2.0, JWTs).
• Experience designing, building, and operating secure, production-grade services and RESTful APIs using microservices architecture.
• Proficiency in Java and working knowledge of PHP.
• Ability to translate product requirements into scalable, secure designs and collaborate across teams.

Responsibilities

• Design, develop, and maintain secure, scalable authentication and authorization systems (Java, PHP, Docker, Kubernetes).
• Build and operate high-quality microservices powering security features like MFA, SSO, OAuth 2.0, OIDC, JWTs, and scopes.
• Provide technical guidance and mentor engineers; contribute to engineering and security best practices.

Skills

Java

PHP

Docker

Kubernetes

MFA

SSO

OAuth 2.0

OIDC

JWTs

Security best practices

Education

Bachelor's degree in Computer Science

Tools

Docker

Kubernetes

RESTful APIs

Job description

Box is seeking a senior software engineer for the Identity and Security Foundation in Redwood City. You will design and implement secure authentication and authorization systems, build scalable microservices, and guide engineers to raise security and engineering standards.

This role emphasizes collaboration across teams and on-call responsiveness. Ideal candidates have 5+ years of software engineering experience, strong Java and PHP skills, and deep knowledge of MFA, SSO, OAuth 2.0, OIDC, and