Senior Software Engineer - Identity, Data Security and Trust

Snowflake; Menlo Park (CA); On-site; USD 200,000 - 287,500; Full time

Benefits offered by this job

Parental leave

Paid time off

401(k) retirement plan

Job summary

Snowflake is hiring a Senior Software Engineer for Identity, Data Security and Trust. You will help build the security backbone for the Data Cloud, enabling trusted data and workload protection at scale.

Expect to work across authentication, authorization, encryption, and policy enforcement in a fast-moving, AI-native environment. You will collaborate with PM, design, and peer engineers to deliver secure-by-default solutions, participate in reviews, and contribute to onboarding and incident

Qualifications

• 5+ years in designing, building, and operating large-scale distributed systems.
• Strong CS fundamentals in data structures, algorithms, and systems design.
• Proficiency in Java, C++, Python, Golang, or Rust with SQL skills.
• Experience shipping and on-call production services with reliability focus.
• BS in CS/CE or related field, or equivalent practical experience.

Responsibilities

• Design and implement AI security capabilities and agent workflows.
• Develop identity and access management systems (auth, SSO, MFA, OAuth/OIDC, SAML, RBAC).
• Build core security infrastructure across secret and key management, end-to-end encryption.
• Create security tooling to monitor, enforce, and detect policy violations.
• Design extensible components for security detectors and visualizations on Snowflake Trust Center.
• Leverage CIS benchmarks and contribute to analytics for threat detection.
• Partner with eng teams to reduce friction while keeping safety.
• Lead secure network architectures to defend against attacks and exfiltration.
• Participate in design reviews, code reviews, and on-call rotations with high standards.

Skills

Distributed systems

CS fundamentals

Java

C++

Python

Golang

Rust

SQL

On-call

Collaboration

Education

BS in Computer Science or related

Tools

Kubernetes

AWS

GCP

Azure

Job description

Senior Software Engineer - Identity, Data Security and Trust

parental leave, paid time off, paid holidays, 401(k), retirement plan

At Snowflake, we are powering the era of the agentic enterprise. To usher in this new era, we seek AI-native thinkers across every function who are energized by the opportunity to reinvent how they work. You don't just use tools; you possess an innate curiosity, treating AI as a high-trust collaborator that is core to how you solve problems and accelerate your impact. We look for low-ego individuals who thrive in dynamic and fast-moving environments and move with an experimental mindset - who rapidly test emerging capabilities to discover simpler, more powerful ways to deliver results. At Snowflake, your role isn't just to execute a function, but to help redefine the future of how work gets done.

We are hiring a Senior Software Engineer across our Identity, Data Security and Trust organization. These teams build the security backbone of Snowflake - enabling customers to confidently bring their most sensitive data and workloads to the Data Cloud, empowering every Snowflake engineer to deliver the most secure platform at scale, and giving customers the tools to monitor, achieve, and maintain a strong security, governance, privacy, and compliance posture. As the agentic era accelerates, these teams are at the forefront of building AI-native security capabilities that protect the world's data.

Responsibilities

• Design and implement critical AI security capabilities - including controlled, audited agent workflows, MCP server and client security, agent identity frameworks, and admin guardrails - that form the foundation for secure agentic enterprise adoption
• Build and evolve foundational identity and access management systems, including authentication protocols, SSO integrations, multi-factor authentication, OAuth/OIDC, SAML, SCIM, and fine-grained RBAC that scales to millions of objects and users
• Design and develop core security infrastructure spanning secret management, key management, service identity, and end-to-end encryption across a natively multi-cloud environment
• Build and maintain security tooling to define, monitor, enforce, and detect policy violations across the platform; implement automation and self-service processes that increase developer autonomy and promote secure-by-default engineering
• Design and implement extensible, plug-and-play platform components that enable first-, second-, and third-party security detectors, responders, and visualizations to be built on top of Snowflake's Trust Center
• Leverage industry‑accredited benchmarks (e.g., CIS) to develop standards‑based security posture assessments; contribute to behavioral analytics pipelines and PII attribution capabilities that help detect, prevent, and respond to threats and abuse vectors
• Partner with engineering teams across the company to understand security pain points and deliver solutions that reduce friction without compromising safety
• Lead the design and enforcement of secure network architectures to actively defend against ransomware attacks and detect sophisticated data exfiltration attempts.
• Participate in design reviews, code reviews, and on‑call rotations; hold a high bar for code quality, reliability, and sound technical decisions

Qualifications

• 5+ years of industry experience designing, building, and operating large-scale distributed systems in production cloud environments
• Strong foundational computer science skills - data structures, algorithms, systems design, and distributed computing
• Proficiency in one or more of Java, C++, Python, Golang, or Rust, with solid SQL skills for data-driven features
• Experience shipping and on‑calling production services with a focus on availability, reliability, and observability
• A collaborative, low‑ego approach to engineering - comfortable iterating quickly and working across PM, design, and peer engineering teams
• BS in Computer Science, Computer Engineering, or a related technical discipline, or equivalent practical experience

Bonus Points

• Knowledge of identity and access management concepts and protocols - SAML, SCIM, OAuth, OIDC, Federation, MFA, or RBAC
• Familiarity with security infrastructure domains such as secret management, key management, service identity, authentication, or authorization
• Experience with database internals, query engines, or data platform systems
• Exposure to machine learning or AI systems, particularly applied to anomaly detection, behavioral analytics, or risk classification
• Contributions to developer platforms, SDKs, or multi‑tenant extensibility frameworks
• Experience deploying and operating services on Kubernetes or production cloud platforms (AWS, Azure, or GCP)

These teams sit at a rare intersection: the security, identity, infrastructure, and customer trust layers of one of the fastest‑growing data platforms in the world. You won't be maintaining someone else's security layer; you'll be defining it. These are teams that value craft, curiosity, and collaboration, and that take pride in making complex security invisible to the developers and customers who depend on it. If you want a role where your technical decisions matter and your growth is tied directly to the scale of the platform you're protecting - and you're energized by the challenge of securing the agentic era before it fully arrives - this is it.

Snowflake is growing fast, and we're scaling our team to help enable and accelerate our growth. We are looking for people who share our values, challenge ordinary thinking, and push the pace of innovation while building a future for themselves and Snowflake.

How do you want to make your impact?

For jobs located in the United States, please visit the job posting on the Snowflake Careers Site for salary and benefits information: careers.snowflake.com

The following represents the expected range of compensation for this role:

• The estimated base salary range for this role is $200,000 - $287,500.
• Additionally, this role is eligible to participate in Snowflake's bonus and equity plan.

The successful candidate's starting salary will be determined based on permissible, non‑discriminatory factors such as skills, experience, and geographic location. This role is also eligible for a competitive benefits package that includes: medical, dental, vision, life, and disability insurance; 401(k) retirement plan; flexible spending & health savings account; at least 12 paid holidays; paid time off; parental leave; employee assistance program; and other company benefits.

To comply with pay transparency requirements and other statutes, you can notify us if you believe that a job posting is not compliant by completing this form.