Software Engineering SMTS, Identity and Access Management
Salesforce · Posted Sep 15
Customer relationship management, cloud computing, enterprise software, and artificial intelligence solutions
Get a personal compatibility score
Add a resume for personal matches
About the role
The Salesforce Enterprise Security Engineering team builds and operates highly scalable, fault-tolerant, distributed systems that deliver cloud-scale Identity and Access Management (IAM) services across the Enterprise network, public cloud infrastructure, and internal data centers, providing core building blocks for identity lifecycle, governance, authentication, authorization, and privileged access management. This is a hands-on full-stack software engineering role focused on the IAM domain, designing and building end-to-end capabilities from backend services and APIs to user-facing experiences for identity lifecycle, access requests, provisioning, entitlement/role management, access certifications, and policy-driven access decisions at enterprise scale. The role also secures the emerging agentic enterprise by designing controls for AI agents and autonomous workloads, advancing Salesforce's Zero Trust architecture.
What you will do
- Design, build, and operate scalable IAM services and APIs spanning identity lifecycle, access requests, entitlement/role management and access certifications.
- Build privileged access management (PAM) capabilities — credential vaulting/rotation, session control, and secrets management and just-in-time (JIT) access flows that grant elevated, time-bound entitlements and revoke them automatically.
- Model and secure non-human/workload identities (NHI) — service accounts, agents, workloads, and machine credentials — including issuance, rotation, and lifecycle governance.
- Develop full-stack features, backend services and modern web front-ends that deliver intuitive self-service and administrative experiences for IAM.
- Build and manage containerized workloads with Kubernetes, Docker, and infrastructure-as-code (Terraform); operate services in a full DevOps model (monitor, troubleshoot, continuously improve).
- Integrate across identity sources, directories, and downstream applications using SCIM, REST, and event-driven patterns.
- Partner with governance and compliance teams to embed SoD, least-privilege, and audit controls (SOX, NIST, SOC 2) into the platform.
- Write clean, maintainable, secure code; participate in design and code reviews; and champion secure SDLC practices.
- Collaborate with cross-functional teams across security, infrastructure, product, and engineering to ensure platform integrity and trustworthiness.
- Create and maintain technical documentation, runbooks, and enablement materials.
- Design for significant features, mentor junior engineers, and drive technical direction and continuous improvement across the platform.
Skills used in this role
What the employer is looking for
- SMTS: 5+ years of professional software development experience building distributed systems in SaaS, PaaS, or IaaS environments.
- Full-stack development proficiency: strong backend skills in Java, Go, and/or Python, plus front-end experience with modern frameworks (e.g., React).
- Solid understanding of the IAM domain, identity governance/lifecycle, authentication, authorization, RBAC/entitlement models, privileged access management including just-in-time access and common protocols (OAuth2, OIDC, SAML, SCIM, LDAP).
- Experience designing and consuming REST APIs (JSON/XML, OpenAPI/Swagger) and integrating heterogeneous systems.
- Strong experience on public cloud platforms (AWS/Azure/GCP), including containers (Docker, Kubernetes) and infrastructure-as-code (Terraform).
- Hands-on experience with CI/CD and source control (Git, Jenkins, or equivalent), including secure coding and defensive programming.
- Solid grasp of DevOps practices, monitoring, and ownership of production systems in high-availability environments.
- Strong problem-solving, debugging, communication, and collaboration skills.
- Bachelor's degree in Computer Science, Engineering, or a related field, or equivalent practical experience.
Preferred qualifications
- Experience integrating AI/agentic capabilities into IAM workflows or user experiences.
- Experience with globally distributed teams and large enterprises.
- Familiarity with commercial IAM platforms (e.g., SailPoint, Okta, CyberArk, Active Directory/EntraID) as a consumer or integrator, not required as a specialty.
Benefits and support
- Compensation and benefits are detailed in the job posting
About Salesforce
Salesforce, Inc. is a leading global cloud-based enterprise software company specializing in customer relationship management (CRM) and artificial intelligence solutions. Through its integrated Customer 360 platform, the company provides applications for sales, customer service, marketing automation, e-commerce, and analytics. Powered by innovations like Agentforce, Salesforce helps businesses bridge human capability with autonomous AI agents to drive customer success.
- Industry
- Cloud Computing
- Company size
- 87000+ employees
- Founded
- 1999
- Location
- San Francisco, California, USA
- Funding stage
- Public Company
Funding
Public Company · $25B raised
- 2026-03Post-IPO Debt$25B
- 2003-01Venture Round$1M
- 2001-06Series D$46.9M
- 1999-11Series C$13.2M
- 1999-06Series B$3.8M
Leadership
Chair, Chief Executive Officer & Co-Founder
President & Chief Operating and Financial Officer
Co-Founder & Chief Technology Officer, Slack
President & Chief Strategy Officer
Recent coverage
Dealroom
Salesforce to Acquire Listen Labs to Expand AI Research Capabilities2026-09-29
Stock Titan
Salesforce Highlights Margin Expansion and Growth Targets at 2026 Investor Day2026-09-17
Salesforce News
Live Nation Makes Show Day Easier for Fans With Salesforce's Agentforce2026-09-16
Investing.com
Salesforce Prices Record $25 Billion Senior Notes Offering for Share Repurchase2026-03-12