Software Engineering SMTS, Enterprise IAM

About the role

The Enterprise Security Engineering team at Salesforce builds and operates highly scalable, fault-tolerant, distributed systems that deliver cloud-scale Identity and Access Management (IAM) services. As a full-stack software engineer, you will design and build end-to-end IAM capabilities, including backend services and APIs, and user-facing experiences.

Responsibilities

• Design, build, and operate scalable IAM services and APIs spanning identity lifecycle, access requests, entitlement and role management, and access certifications.
• Develop full-stack features, backend services, and modern web front-ends that deliver intuitive self-service and administrative experiences for IAM.
• Build and manage containerized workloads with Kubernetes, Docker, and infrastructure-as-code (IaC) tools such as Terraform; operate services in a full DevOps model (monitor, troubleshoot, continuously improve).
• Integrate across identity sources, directories, and downstream applications using System for Cross-domain Identity Management (SCIM), REST, and event-driven patterns.
• Partner with governance and compliance teams to embed Separation of Duties (SoD), least-privilege, and audit controls (Sarbanes-Oxley (SOX), National Institute of Standards and Technology (NIST), SOC 2) into the platform.
• Write clean, maintainable, secure code; participate in design and code reviews; and champion secure Software Development Life Cycle (SDLC) practices.
• Collaborate with cross-functional teams across security, infrastructure, product, and engineering to ensure platform integrity and trustworthiness.
• Create and maintain technical documentation, runbooks, and enablement materials.
• Design significant features, mentor junior engineers, and drive technical direction and continuous improvement across the platform.
• Build and ship high-quality, production-grade software using modern engineering practices, with AI as a core part of your development workflow — pushing the boundaries of AI development tools to deliver secure, optimized, and high-quality code.
• Design and orchestrate complex systems where AI agents integrate seamlessly into human workflows, driving efficiency and innovation at scale.
• Contribute to building and maintaining shared system context — an explicit repository of system designs, constraints, and standards that enables AI to operate accurately and reliably.

Requirements

• 5 or more years of professional software development experience building distributed systems in SaaS, PaaS, or IaaS environments.
• Full-stack development proficiency: strong backend skills in Java, Go, and/or Python, plus front-end experience with modern frameworks such as React.
• A solid understanding of the IAM domain, identity governance and lifecycle, authentication, authorization, Role-Based Access Control (RBAC) and entitlement models, privileged access management including just-in-time access, and common protocols (OAuth 2.0, OpenID Connect (OIDC), Security Assertion Markup Language (SAML), SCIM, Lightweight Directory Access Protocol (LDAP)).
• Experience designing and consuming REST Application Programming Interfaces (APIs) (JSON/XML, OpenAPI/Swagger) and integrating heterogeneous systems.
• Strong experience on public cloud platforms (AWS, Azure, or GCP), including containers (Docker, Kubernetes), and infrastructure-as-code tools such as Terraform.
• Hands-on experience with Continuous Integration and Continuous Delivery (CI/CD) and source control (Git, Jenkins, or equivalent), including secure coding and defensive programming.
• A solid grasp of DevOps practices, monitoring, and ownership of production systems in high-availability environments.
• Strong problem-solving, debugging, communication, and collaboration skills.
• A demonstrated, genuine AI-first approach to engineering — using AI to move faster, build fluency across the stack, and contribute well beyond your core specialty.
• Experience using AI tools (such as Claude Code, GitHub Copilot, Codex, or Cursor) in development workflows.
• Advanced prompt engineering skills and the ability to write precise, structured prompts and cultivate the system context that makes AI outputs reliable, secure, and production-ready.
• A Bachelor's degree in Computer Science, Engineering, or a related field, or equivalent practical experience.

Qualifications

• Experience integrating AI and agentic capabilities into IAM workflows or user experiences.
• Familiarity with commercial IAM platforms such as SailPoint, Okta, CyberArk, or Active Directory/Entra ID — as a consumer or integrator (this is not required as a specialty).

Skills

• Java, Go, Python
• React, modern web frameworks
• Public cloud platforms (AWS, Azure, GCP)
• Kubernetes, Docker, Terraform
• CI/CD, Git, Jenkins
• DevOps practices, monitoring, high-availability environments
• AI tools (Claude Code, GitHub Copilot, Codex, Cursor)
• Advanced prompt engineering
• Commercial IAM platforms (SailPoint, Okta, CyberArk, Active Directory/Entra ID)

Benefits

At Salesforce, we offer a variety of benefits to help you live well including: time off programs, medical, dental, vision, mental health support, paid parental leave, life and disability insurance, 401(k), and an employee stock purchasing program. More details about company benefits can be found at the following link: https://www.salesforcebenefits.com.

Pay

The typical base salary range for this position is $148,500 - $223,900 annually.

Schedule

Full-time.