Software Engineering SMTS, Enterprise IAM - Salesforce

To get the best candidate experience, please consider applying for a maximum of 3 roles within 12 months to ensure you are not duplicating efforts.

Job Category

Job Details

About Salesforce

Salesforce is the #1 AI CRM, where humans with agents drive customer success together. Here, ambition meets action. Tech meets trust. And innovation isn’t a buzzword — it’s a way of life. The world of work as we know it is changing and we're looking for Trailblazers who are passionate about bettering business and the world through AI, driving innovation, and keeping Salesforce's core values at the heart of it all.

Ready to level-up your career at the company leading workforce transformation in the agentic era? You’re in the right place! Agentforce is the future of AI, and you are the future of Salesforce.

The Experience

The Enterprise Security Engineering team builds and operates highly scalable, fault-tolerant, distributed systems that deliver cloud-scale Identity and Access Management (IAM) services across Salesforce's enterprise network, public cloud infrastructure, and internal data centers. We provide the core building blocks for identity lifecycle, governance, authentication, authorization, and privileged access management that protect customer trust and empower every Salesforce engineer to operate securely, regardless of environment. As a full-stack software engineer on this team, you will design and build end-to-end IAM capabilities — from backend services and APIs to the user-facing experiences that power access requests, provisioning, entitlement management, and access certifications at enterprise scale. You will help secure the emerging agentic enterprise by designing controls for AI agents and autonomous workloads, and you will play a foundational role in advancing Salesforce's Zero Trust architecture.

What You'll Actually Be Doing

Design, build, and operate scalable IAM services and APIs spanning identity lifecycle, access requests, entitlement and role management, and access certifications.

Build Privileged Access Management (PAM) capabilities — credential vaulting and rotation, session control, secrets management, and just-in-time (JIT) access flows that grant elevated, time-bound entitlements and revoke them automatically.

Model and secure non-human identities (NHI) — service accounts, agents, workloads, and machine credentials — including issuance, rotation, and lifecycle governance.

Develop full-stack features, backend services, and modern web front-ends that deliver intuitive self-service and administrative experiences for IAM.

Build and manage containerized workloads with Kubernetes, Docker, and infrastructure-as-code (IaC) tools such as Terraform; operate services in a full DevOps model (monitor, troubleshoot, continuously improve).