Software Engineering SMTS

Momentum; Bellevue (WA); On-site; USD 160,000 - 210,000; Full time

Job summary

Salesforce is seeking an experienced backend engineer for the Production IAM stack. You will help deliver features spanning Kerberos, TOTP, and WebAuthn, using Java, Go, or C#.

You will work with product owners and tech leads to scope work, implement secure services, and ensure high-availability in a tier-0 identity platform. You will contribute to design, review code, and participate in on-call rotations for a critical production service, leveraging Kubernetes, CI/CD, and cloud deployments.

Qualifications

• Strong production experience building backend services in Java/Go/C#.
• Familiarity with identity/federation protocols (Kerberos, LDAP, WebAuthn, TOTP).
• Experience deploying distributed services in Public Cloud (AWS/GCP) or hybrid on Kubernetes.
• Solid fundamentals: data structures, testing, code review, CI/CD, Agile.
• Security-first mindset for identity-critical systems.

Responsibilities

• Deliver features for the Authentication Platform service portfolio (Kerberos, TOTP, WebAuthn).
• Contribute to design specs and spikes; work with senior engineers on design.
• Implement identity protocols and work with SAML/OIDC for interoperability.

Skills

Java

Go

C#

Distributed services

Education

Master's degree in Computer Science or related field

Bachelor's degree in CS or related field

Tools

Kubernetes

CI/CD

Job description

The Experience

The Authentication Platform team owns the core identity services for Salesforce's production infrastructure — the Production IAM stack. The portfolio spans Kerberos-based authentication, TOTP, and FIDO2/WebAuthn, bridging legacy infrastructure protocols and modern cloud-native identity standards. Because the platform is a tier-0 dependency for the entire company, we run at massive throughput with a 4+ nines availability target across Public Cloud (AWS/GCP) and hybrid deployments on Kubernetes, with modern CI/CD. Our security posture is Zero Trust and least-privilege by default, and we partner closely with security architects on identity verification and credential-handling design.

What You'll Actually Be Doing

• Deliver features across the Authentication Platform's service portfolio - Kerberos, TOTP, FIDO2/WebAuthn - writing clean, well-tested backend code in Java, Go, or C#.
• Contribute to design specs and research spikes for features in your area, alongside more senior engineers who lead the design.
• Implement identity and federation protocols used by the platform, including Kerberos, LDAP, WebAuthn/FIDO2, and TOTP. Familiarity with SAML/OIDC is useful for interop conversations with adjacent teams.
• Partner with the Product Owner and tech lead on story-level scope, sequencing, and dependencies for your own work, and help refine and clarify work items before they land in a sprint.
• Reliably deliver as a developer, reviewer, and tester — high test coverage, clean code, and reviews that catch issues before they land, with a security-first mindset appropriate for tier-0 services.
• Apply Salesforce engineering best practices to code, tests, and CI/CD pipelines. Leave code in better shape than you found it.
• Use AI development tools (e.g.Claude Code) in your day-to-day workflow, and critically evaluate both human and AI-generated code for correctness, performance, and security compliance.
• Analyze and fix bugs in your area, working with more senior engineers on the complex ones. Debug production issues and drive them to a fix.
• Exhibit ownership beyond just coding your features — an active role in testing, review, and monitoring is part of the job, especially given the tier-0 nature of the platform.
• Participate in the on-call rotation for the Authentication Platform and handle common alerts confidently. On-call is a real, high-visibility part of this role because of the platform's tier-0 status.
• Understand the platform's telemetry — metrics, logs, traces, SLIs — and extend it for the features you own. The availability target is 4+ nines.
• Contribute to Root Cause Analyses for incidents in your area, and follow through on assigned action items.
• Work with internal stakeholders — service teams and infrastructure owners who depend on the Authentication Platform — to answer integration questions about the features you own.
• Author and maintain technical documentation and runbooks for your work.

You're Our Person If...

• Strong programming ability in Java, Go, or C#, with production experience building backend services.
• Working knowledge of at least one identity or federation protocol from this set: Kerberos, LDAP, WebAuthn/FIDO2, TOTP, SAML, OIDC. Deeper experience in one or more is a plus.
• Experience building, deploying, and debugging distributed services in a Public Cloud environment (AWS or GCP) or a hybrid deployment, using Kubernetes and modern CI/CD.
• Solid grasp of software fundamentals: data structures, testing, code review, source control, CI/CD, and Agile execution as a team member.
• A security-first mindset — writing code with least-privilege defaults, threat-aware reviews, and thorough automated testing appropriate for identity-critical systems.
• Ability to debug production issues in a distributed system using logs, metrics, and traces.
• Comfortable executing an agreed-upon plan largely independently, escalating design-level and cross-cutting decisions to senior engineers.

Even Better If...

• IAM specialist depth — familiarity with the internals of one or more of Kerberos, LDAP, WebAuthn/FIDO2, TOTP, and the interop story with SAML/OIDC.
• Security hardening — familiarity with HSMs, PKI, and secure credential storage patterns.
• Compliance and auditing — exposure to controls and evidence requirements under PCI, SOC 2, or HIPAA.
• Operational grit — experience on-call for a high-visibility production service, and comfort debugging live incidents under pressure.
• Experience integrating AI development tools into engineering workflows, including prompt design and reviewing AI-generated code for security-critical systems.

Education

• Master's degree (or foreign equivalent) in Computer Science, Cybersecurity, Software Engineering, or a related field. A Bachelor's degree (or foreign equivalent) is acceptable with additional years of experience.

Minimum years of experience

• 5 years of software engineering experience