Tier-0 Identity Platform Backend Engineer

Leadout Capital; Bellevue (WA); On-site; USD 140,000 - 190,000; Full time

Job summary

Salesforce is seeking an Authentication Platform engineer to join Production IAM, responsible for Kerberos, TOTP, and WebAuthn services running at 4+ nines availability in AWS/GCP and on Kubernetes. You will implement backend features in Java, Go, or C#, contribute to design specs, participate in on-call rotations, and help maintain security-first, zero-trust identity infrastructure.

This role emphasizes hands-on coding, high test coverage, and collaboration with product owners and security

Qualifications

• Strong programming ability in Java, Go, or C#, with production experience building backend services.
• Experience with identity or federation protocols (Kerberos, LDAP, WebAuthn/FIDO2, TOTP, SAML, OIDC).
• Experience deploying and debugging distributed services in Public Cloud (AWS/GCP) or hybrid with Kubernetes/CI/CD.
• Solid fundamentals in data structures, testing, code review, version control, CI/CD, and Agile teamwork.
• Security-first mindset with least-privilege, threat-aware reviews, and automated testing for identity-critical systems.

Responsibilities

• Deliver features across the Authentication Platform's service portfolio (Kerberos, TOTP, WebAuthn) with clean, well-tested backend code.
• Contribute to design specs and spikes for features, alongside senior engineers.
• Implement identity and federation protocols used by the platform, including Kerberos, LDAP, WebAuthn/FIDO2, and TOTP.
• Collaborate with the Product Owner and tech lead on scope, sequencing, and dependencies for your work.
• Be a developer, reviewer, and tester with high test coverage and security-focused reviews.
• Follow Salesforce engineering best practices for code, tests, and CI/CD pipelines.
• Use AI development tools in daily workflow and evaluate AI-generated code for correctness and security.
• Analyze and fix bugs in production areas, with senior engineers on complex issues.
• Participate in on-call rotation for the Authentication Platform due to tier-0 status.
• Document runbooks and technical docs for your work.

Skills

Backend development

Cloud platforms

Distributed systems

Security-minded

CI/CD

Debugging

Independent work

Education

Master's degree in CS or related

Job description

Salesforce is seeking an Authentication Platform engineer to join Production IAM, responsible for Kerberos, TOTP, and WebAuthn services running at 4+ nines availability in AWS/GCP and on Kubernetes. You will implement backend features in Java, Go, or C#, contribute to design specs, participate in on-call rotations, and help maintain security-first, zero-trust identity infrastructure.

This role emphasizes hands-on coding, high test coverage, and collaboration with product owners and security