Senior Software Engineer, Microservice Foundation

Box (NYSE:BOX) is the leader in Intelligent Content Management. Our platform enables organizations to fuel collaboration, manage the entire content lifecycle, secure critical content, and transform business workflows with enterprise AI. We help companies thrive in the new AI-first era of business. Founded in 2005, Box simplifies work for leading global organizations, including JLL, Morgan Stanley, and Nationwide.

About the role

Box is redefining how the world's largest enterprises secure, manage, and collaborate on content in the cloud. At the heart of this transformation is the Microservices Foundation team, which designs and scales the high-performance, mission-critical infrastructure that powers Box globally. The team builds and maintains the core infrastructure, microservices frameworks, tools, and best practices that empower Box product teams to develop, deploy, and operate microservices at scale.

The team directly owns and scales several critical, high-traffic infrastructure services:

• API Gateway: Orchestrates request routing, authentication, and rate limiting for all incoming traffic.
• Rate Limiter: Executes real-time rate-limiting decisions to protect Box from overload, enhance security, and guarantee fair resource allocation.
• Permissions Services: Enforces fine-grained, attribute-based access control (ABAC) to deliver context-aware, dynamic security controls at microsecond latency.
• Unified Events Producer: Publishes high-throughput audit log events that power critical admin reporting and billing pipelines.

The team also owns the Monaco Framework, a foundational technology that enables and powers 150+ microservices at Box, ensuring consistent standards, simplified dependency management, and robust infrastructure compatibility. Key capabilities include:

• Core Service Functions: Standardized annotations, dynamic configuration, unified error handling, filters, and listeners
• Code Generation & Build Utilities: Automatic generation of Java server-side stubs and client SDKs from OpenAPI schemas (OAS 3.x specifications), and seamless integration with Gradle build tool
• Observability & Logging: Out-of-the-box structured logging, comprehensive metrics, and distributed tracing for end-to-end visibility
• Security & Permissions: Robust endpoint protection and standardized REST API security protocols
• HTTP Client & Communication: Standardized HTTP clients and seamless integrations with messaging systems like GCP Pub/Sub and MQS/JMS
• Database & Persistence: A Spring Data-inspired framework built over Box’s high-performance distributed data access layer

Responsibilities

• Lead significant technology initiatives from inception through successful deployment across multiple architecture layers.
• Build platforms and services that enable application teams to focus on product development.
• Write clear, detailed technical documentation that conveys architecture and product details for application teams.
• Provide expert guidance across all architecture levels and mentor other engineers.
• Participate in and influence domain-wide architectural reviews and decisions.
• Participate in the on-call rotation, available to help respond to and triage any issues that arise.

Requirements

• Bachelor’s or above degree in Computer Science or equivalent practical experience.
• 5+ years of professional software development experience.
• Proven track record of leading the design and implementation efforts in building, deploying, and supporting high-scale backend systems.
• Proficiency in Java/Spring/SpringBoot.
• Strong understanding of software design principles and patterns.
• Strong communication skills with the ability to explain complex architectural concepts to non-technical stakeholders.
• Ownership mindset with a focus on delivering high-quality work both technically and collaboratively.

Preferred Qualifications

• Experience with GCP or equivalent cloud platforms.
• Familiarity or experience with Microservices architecture.

Skills

Languages: Java, Scala, PHP

Libraries/Frameworks: Spring Boot, Vert.x/Netty, GCP Pub-Sub, OpenAPI Specification, Okhttp, Gradle

Infrastructure: GCP, Kubernetes, Zookeeper, Redis/Memcache

Observability/Monitoring: SLF4J, Chronosphere (PromQL), PagerDuty, Otel, BigQuery, GCL

Schedule

Boxers are expected to work from their assigned office a minimum of 3 days per week.

Pay

Redwood City Pay Range: $198,500 USD - $248,000 USD. This role is also eligible for equity and benefits.