Senior Software Engineer

Responsibilities

• Design and implement AI security capabilities, including controlled and audited agent workflows, MCP server and client security, agent identity frameworks, and administrative guardrails.
• Build and evolve identity and access management systems involving authentication, SSO, MFA, OAuth/OIDC, SAML, SCIM, and fine-grained RBAC.
• Design and develop security infrastructure for secret management, key management, service identity, and end-to-end encryption across a multi-cloud environment.
• Build security tooling for defining, monitoring, enforcing, and detecting policy violations, including automation and self-service processes.
• Develop extensible Trust Center platform components supporting security detectors, responders, and visualizations.
• Create standards-based security posture assessments and contribute to behavioral analytics and PII attribution capabilities.
• Partner with engineering teams to deliver secure solutions that reduce friction without compromising safety.
• Lead secure network architecture design and enforcement to defend against ransomware and data exfiltration.
• Participate in design reviews, code reviews, and on-call rotations while maintaining high standards for quality and reliability.

Requirements

• 5+ years of industry experience designing, building, and operating large-scale distributed systems in production cloud environments.
• Strong knowledge of data structures, algorithms, systems design, and distributed computing.
• Proficiency in one or more of Java, C++, Python, Golang, or Rust, with solid SQL skills.
• Experience shipping and operating production services with attention to availability, reliability, and observability.
• Collaborative approach to working across product management, design, and engineering teams.
• Bachelor’s degree in Computer Science, Computer Engineering, or a related technical discipline, or equivalent practical experience.
• Preferred experience with identity and access management concepts and protocols such as SAML, SCIM, OAuth, OIDC, Federation, MFA, and RBAC.
• Preferred familiarity with secret management, key management, service identity, authentication, or authorization.
• Preferred experience with database internals, query engines, data platforms, developer platforms, SDKs, or multi-tenant extensibility frameworks.
• Preferred exposure to machine learning or AI systems for anomaly detection, behavioral analytics, or risk classification.
• Preferred experience deploying and operating services on Kubernetes or AWS, Azure, or GCP.