Software Engineering SMTS, Enterprise IAM

Salesforce; Bellevue (WA); On-site; USD 148,500 - 223,900; Full time

Job summary

Salesforce is seeking an experienced software engineer to join the Enterprise Security Engineering team, building scalable IAM services and APIs across cloud and on‑prem environments.

You will design, implement, and operate systems for identity lifecycle, access requests, PAM, and secure SDLC practices, collaborating with cross‑functional teams and mentoring junior engineers. An AI‑first approach is encouraged.

Qualifications

• 5+ years of professional software development experience in SaaS/PaaS/IaaS environments.
• Strong backend skills in Java/Go/Python and frontend with React.
• Solid IAM domain knowledge: authentication, authorization, RBAC, entitlement models, and JD/SoD concepts.

Responsibilities

• Design, build, and operate scalable IAM services and APIs.
• Develop PAM capabilities including credential vaulting, rotation, and just-in-time access.
• Model and secure non-human identities like service accounts and workloads.
• Develop full-stack features and admin experiences for IAM.
• Work with Kubernetes, Docker, and Terraform; adopt a DevOps model.
• Integrate identity sources via SCIM, REST, and event-driven patterns.
• Collaborate with governance/compliance to embed SOX/NIST/SOC 2 controls.
• Write secure code, participate in reviews, and promote SDLC best practices.
• Mentor junior engineers and drive technical direction across the platform.
• Contribute to AI-enabled development workflows and maintain system context.

Skills

Distributed systems

Java

Go

Python

React

IAM

OAuth 2.0

OIDC

SAML

Terraform

Docker

Kubernetes

CI/CD

Education

Bachelor's degree in Computer Science, Engineering, or related field

Tools

Terraform

Docker

Kubernetes

OpenAPI/Swagger

Job description

Job Category

Software Engineering

Job Details

About Salesforce

Salesforce is the #1 AI CRM, where humans with agents drive customer success together. Here, ambition meets action. Tech meets trust. And innovation isn’t a buzzword — it’s a way of life. The world of work as we know it is changing and we're looking for Trailblazers who are passionate about bettering business and the world through AI, driving innovation, and keeping Salesforce's core values at the heart of it all. Ready to level-up your career at the company leading workforce transformation in the agentic era? You’re in the right place! Agentforce is the future of AI, and you are the future of Salesforce.

The Experience

The Enterprise Security Engineering team builds and operates highly scalable, fault-tolerant, distributed systems that deliver cloud-scale Identity and Access Management (IAM) services across Salesforce's enterprise network, public cloud infrastructure, and internal data centers. We provide the core building blocks for identity lifecycle, governance, authentication, authorization, and privileged access management that protect customer trust and empower every Salesforce engineer to operate securely, regardless of environment.

What You'll Actually Be Doing

• Design, build, and operate scalable IAM services and APIs spanning identity lifecycle, access requests, entitlement and role management, and access certifications.
• Build Privileged Access Management (PAM) capabilities — credential vaulting and rotation, session control, secrets management, and just-in-time (JIT) access flows that grant elevated, time-bound entitlements and revoke them automatically.
• Model and secure non-human identities (NHI) — service accounts, agents, workloads, and machine credentials — including issuance, rotation, and lifecycle governance.
• Develop full-stack features, backend services, and modern web front-ends that deliver intuitive self-service and administrative experiences for IAM.
• Build and manage containerized workloads with Kubernetes, Docker, and infrastructure-as-code (IaC) tools such as Terraform; operate services in a full DevOps model (monitor, troubleshoot, continuously improve).
• Integrate across identity sources, directories, and downstream applications using System for Cross-domain Identity Management (SCIM), REST, and event-driven patterns.
• Partner with governance and compliance teams to embed Separation of Duties (SoD), least-privilege, and audit controls (Sarbanes-Oxley (SOX), National Institute of Standards and Technology (NIST), SOC 2) into the platform.
• Write clean, maintainable, secure code; participate in design and code reviews; and champion secure Software Development Life Cycle (SDLC) practices.
• Collaborate with cross-functional teams across security, infrastructure, product, and engineering to ensure platform integrity and trustworthiness.
• Create and maintain technical documentation, runbooks, and enablement materials.
• Design significant features, mentor junior engineers, and drive technical direction and continuous improvement across the platform.
• Build and ship high-quality, production-grade software using modern engineering practices, with AI as a core part of your development workflow — pushing the boundaries of AI development tools to deliver secure, optimized, and high-quality code.
• Design and orchestrate complex systems where AI agents integrate seamlessly into human workflows, driving efficiency and innovation at scale.
• Contribute to building and maintaining shared system context — an explicit repository of system designs, constraints, and standards that enables AI to operate accurately and reliably. Critically evaluate code (human- or AI-generated) for correctness, quality, security, and performance.

You're Our Person If...

• You have 5 or more years of professional software development experience building distributed systems in Software as a Service (SaaS), Platform as a Service (PaaS), or Infrastructure as a Service (IaaS) environments.
• You have full-stack development proficiency: strong backend skills in Java, Go, and/or Python, plus front-end experience with modern frameworks such as React.
• You have a solid understanding of the IAM domain, identity governance and lifecycle, authentication, authorization, Role-Based Access Control (RBAC) and entitlement models, privileged access management including just-in-time access, and common protocols (OAuth 2.0, OpenID Connect (OIDC), Security Assertion Markup Language (SAML), SCIM, Lightweight Directory Access Protocol (LDAP)).
• You have experience designing and consuming REST Application Programming Interfaces (APIs) (JSON/XML, OpenAPI/Swagger) and integrating heterogeneous systems.
• You have strong experience on public cloud platforms (AWS, Azure, or GCP), including containers (Docker, Kubernetes), and infrastructure-as-code tools such as Terraform.
• You have hands‑on experience with Continuous Integration and Continuous Delivery (CI/CD) and source control (Git, Jenkins, or equivalent), including secure coding and defensive programming.
• You have a solid grasp of DevOps practices, monitoring, and ownership of production systems in high-availability environments.
• You bring strong problem-solving, debugging, communication, and collaboration skills.
• You bring a demonstrated, genuine AI‑first approach to engineering — using AI to move faster, build fluency across the stack, and contribute well beyond your core specialty.
• You have experience using AI tools (such as Claude Code, GitHub Copilot, Codex, or Cursor) in development workflows.
• You have advanced prompt engineering skills and the ability to write precise, structured prompts and cultivate the system context that makes AI outputs reliable, secure, and production‑ready.
• You hold a Bachelor's degree in Computer Science, Engineering, or a related field, or have equivalent practical experience.

Even Better If...

• You have experience integrating AI and agentic capabilities into IAM workflows or user experiences.
• You have experience working with globally distributed teams and large enterprises.
• You have familiarity with commercial IAM platforms such as SailPoint, Okta, CyberArk, or Active Directory/Entra ID — as a consumer or integrator (this is not required as a specialty).

Unleash Your Potential

When you join Salesforce, you’ll be limitless in all areas of your life. Our benefits and resources support you to find balance and be your best, and our AI agents accelerate your impact so you can do your best. Together, we’ll bring the power of Agentforce to organizations of all sizes and deliver amazing experiences that customers love.

Accommodations

If you need a reasonable accommodation during the application or the recruiting process, please submit a request via this Accommodations Request Form.

Please note that Salesforce uses artificial intelligence (AI) tools to help our recruiters assess and evaluate candidates’ resumes and qualifications throughout the recruiting process. Humans will always make any candidate selection and hiring decisions. Please see our Candidate Privacy Statement for more information about how we use your personal data and your rights, including with regard to use of AI tools and opt out options.

Posting Statement

Salesforce is an equal opportunity employer and maintains a policy of non-discrimination with all employees and applicants for employment. What does that mean exactly? It means that at Salesforce, we believe in equality for all. And we believe we can lead the path to equality in part by creating a workplace that’s inclusive, and free from discrimination. Know your rights: workplace discrimination is illegal. Any employee or potential employee will be assessed on the basis of merit, competence and qualifications – without regard to race, religion, color, national origin, sex, sexual orientation, gender expression or identity, transgender status, age, disability, veteran or marital status, political viewpoint, or other classifications protected by law. This policy applies to current and prospective employees, no matter where they are in their Salesforce employment journey. It also applies to recruiting, hiring, job assignment, compensation, promotion, benefits, training, assessment of job performance, discipline, termination, and everything in between. Recruiting, hiring, and promotion decisions at Salesforce are fair and based on merit. The same goes for compensation, benefits, promotions, transfers, reduction in workforce, recall, training, and education.

In the United States, compensation offered will be determined by factors such as location, job level, job-related knowledge, skills, and experience. Certain roles may be eligible for incentive compensation, equity, and benefits. Salesforce offers a variety of benefits to help you live well including: time off programs, medical, dental, vision, mental health support, paid parental leave, life and disability insurance, 401(k), and an employee stock purchasing program.

The typical base salary range for this position is $148,500 - $223,900 annually. The range represents base salary only, and does not include company bonus, incentive for sales roles, equity or benefits, as applicable.