You'll work on services in the Production IAM stack as an individual contributor — implementing features across the Kerberos, TOTP, and FIDO2/WebAuthn service portfolio, contributing to designs that senior engineers lead, and taking on-call for a tier-0 platform. This is a hands-on engineering role focused on strong execution, growing technical depth in identity protocols, and shipping high-quality, well-tested code in a security-critical environment.
What You'll Actually Be Doing
Deliver features across the Authentication Platform's service portfolio - Kerberos, TOTP, FIDO2/WebAuthn - writing clean, well-tested backend code in Java, Go, or C#.
Contribute to design specs and research spikes for features in your area, alongside more senior engineers who lead the design.
Implement identity and federation protocols used by the platform, including Kerberos, LDAP, WebAuthn/FIDO2, and TOTP. Familiarity with SAML/OIDC is useful for interop conversations with adjacent teams.
Partner with the Product Owner and tech lead on story-level scope, sequencing, and dependencies for your own work, and help refine and clarify work items before they land in a sprint.
Reliably deliver as a developer, reviewer, and tester — high test coverage, clean code, and reviews that catch issues before they land, with a security-first mindset appropriate for tier-0 services.
Apply Salesforce engineering best practices to code, tests, and CI/CD pipelines. Leave code in better shape than you found it.
Use AI development tools (e.g.Claude Code) in your day-to-day workflow, and critically evaluate both human and AI-generated code for correctness, performance, and security compliance.
Analyze and fix bugs in your area, working with more senior engineers on the complex ones. Debug production issues and drive them to a fix.
Exhibit ownership beyond just coding your features — an active role in testing, review, and monitoring is part of the job, especially given the tier-0 nature of the platform.
Participate in the on-call rotation for the Authentication Platform and handle common alerts confidently. On-call is a real, high-visibility part of this role because of the platform's tier-0 status.
Understand the platform's telemetry — metrics, logs, traces, SLIs — and extend it for the features you own. The availability target is 4+ nines.
Contribute to Root Cause Analyses for incidents in your area, and follow through on assigned action items.
Work with internal stakeholders — service teams and infrastructure owners who depend on the Authentication Platform — to answer integration questions about the features you own.
Author and maintain technical documentation and runbooks for your work.
You're Our Person If...
Strong programming ability in Java, Go, or C#, with production experience building backend services.
Working knowledge of at least one identity or federation protocol from this set: Kerberos, LDAP, WebAuthn/FIDO2, TOTP, SAML, OIDC. Deeper experience in one or more is a plus.
Experience building, deploying, and debugging distributed services in a Public Cloud environment (AWS or GCP) or a hybrid deployment, using Kubernetes and modern CI/CD.
Solid grasp of software fundamentals: data structures, testing, code review, source control, CI/CD, and Agile execution as a team member.
A security-first mindset — writing code with least-privilege defaults, threat-aware reviews, and thorough automated testing appropriate for identity-critical systems.
Ability to debug production issues in a distributed system using logs, metrics, and traces.
Comfortable executing an agreed-upon plan largely independently, escalating design-level and cross-cutting decisions to senior engineers.
Even Better If...
IAM specialist depth — familiarity with the internals of one or more of Kerberos, LDAP, WebAuthn/FIDO2, TOTP, and the interop story with SAML/OIDC.
Security hardening — familiarity with HSMs, PKI, and secure credential storage patterns.
Compliance and auditing — exposure to controls and evidence requirements under PCI, SOC 2, or HIPAA.
Operational grit — experience on-call for a high-visibility production service, and comfort debugging live incidents under pressure.
Experience integrating AI development tools into engineering workflows, including prompt design and reviewing AI-generated code for security-critical systems.
Education
Master's degree (or foreign equivalent) in Computer Science, Cybersecurity, Software Engineering, or a related field. A Bachelor's degree (or foreign equivalent) is acceptable with additional years of experience.
Minimum years of experience
5 years of software engineering experience
Unleash Your Potential
When you join Salesforce, you’ll be limitless in all areas of your life. Our benefits and resources support you to find balance and be your best, and our AI agents accelerate your impact so you can do your best. Together, we’ll bring the power of Agentforce to organizations of all sizes and deliver amazing experiences that customers love. Apply today to not only shape the future — but to redefine what’s possible — for yourself, for AI, and the world.
Accommodations
If you need a reasonable accommodation during the application or the recruiting process, please submit a request via this Accommodations Request Form.
Please note that Salesforce uses artificial intelligence (AI) tools to help our recruiters assess and evaluate candidates’ resumes and qualifications throughout the recruiting process. Humans will always make any candidate selection and hiring decisions. Please see our Candidate Privacy Statement for more information about how we use your personal data and your rights, including with regard to use of AI tools and opt out options.
Posting Statement
Salesforce is an equal opportunity employer and maintains a policy of non-discrimination with all employees and applicants for employment. What does that mean exactly? It means that at Salesforce, we believe in equality for all. And we believe we can lead the path to equality in part by creating a workplace that’s inclusive, and free from discrimination. Know your rights: workplace discrimination is illegal. Any employee or potential employee will be assessed on the basis of merit, competence and qualifications – without regard to race, religion, color, national origin, sex, sexual orientation, gender expression or identity, transgender status, age, disability, veteran or marital status, political viewpoint, or other classifications protected by law. This policy applies to current and prospective employees, no matter where they are in their Salesforce employment journey. It also applies to recruiting, hiring, job assignment, compensation, promotion, benefits, training, assessment of job performance, discipline, termination, and everything in between. Recruiting, hiring, and promotion decisions at Salesforce are fair and based on merit. The same goes for compensation, benefits, promotions, transfers, reduction in workforce, recall, training, and education.
In the United States, compensation offered will be determined by factors such as location, job level, job-related knowledge, skills, and experience. Certain roles may be eligible for incentive compensation, equity, and benefits. Salesforce offers a variety of benefits to help you live well including: time off programs, medical, dental, vision, mental health support, paid parental leave, life and disability insurance, 401(k), and an employee stock purchasing program. More details about company benefits can be found at the following link: https://www.salesforcebenefits.com.
At Salesforce, we believe in equitable compensation practices that reflect the dynamic nature of labor markets across various regions.

The typical base salary range for this position is $148,500 - $223,900 annually. 

The range represents base salary only, and does not include company bonus, incentive for sales roles, equity or benefits, as applicable.
