Staff Software Engineer, Identity & Access Management

Snowflake Identity And Access Management

At Snowflake, we are powering the era of the agentic enterprise. To usher in this new era, we seek AI-native thinkers across every function who are energized by the opportunity to reinvent how they work. You don't just use tools; you possess an innate curiosity, treating AI as a high-trust collaborator that is core to how you solve problems and accelerate your impact. We look for low-ego individuals who thrive in dynamic and fast-moving environments and move with an experimental mindset — who rapidly test emerging capabilities to discover simpler, more powerful ways to deliver results. At Snowflake, your role isn't just to execute a function, but to help redefine the future of how work gets done.

There is only one Data Cloud. Snowflake's founders started from scratch and designed a data platform built for the cloud that is effective, affordable, and accessible to all data users. But it didn't stop there. They engineered Snowflake to power the Data Cloud, where thousands of organizations unlock the value of their data with near-unlimited scale, concurrency, and performance. Easily analyze your unstructured data, build data agents and create ML workflows using a comprehensive suite of AI services, all within the same secure and governed environment as your data. This is our vision: a world with endless insights to tackle the challenges and opportunities of today and reveal the possibilities of tomorrow.

The identity & access management (IAM) team's charter is to enable our customers to confidently bring their most sensitive data and workloads to Snowflake. We provide the authentication and authorization capabilities for customers to secure their Snowflake accounts. We are heavily focused on critical AI adoption and security capabilities like Snowflake Intelligence access control, MCP server and clients, Agent identity, Admin guardrails for agents etc. Our feature set includes capabilities like user management, secret-less authentication for both human and service users, SSO integration with numerous IdPs, MFA, OAuth and OIDC support for 3P applications, and RBAC for granular access control. Our systems are critical to customer trust and maintaining Snowflake's security, reliability and performance. The team culture is very collaborative with ample opportunities for growth and mentorship from Principal engineers.

As a Staff Software Engineer - Identity & Access Management, you will:

• Design and implement critical AI security capabilities for controlled, audited, restricted agent workflows, both inbound and outbound.
• Design and implement features that provide critical identity and access management capabilities, including integration with the next generation identity providers and authentication protocols.
• Build authorization frameworks to provide fine grained access control, which can scale to seamlessly managing millions of objects and users.
• Design and develop solutions for seamless and secure data sharing, access to applications running in snowflake, and access via external applications
• Lead and deliver multi-engineer x-team projects, including managing low-level project planning and execution
• Actively guide the team and partners via high-quality code and design reviews
• Play a critical role in shaping the strategic direction for your product focus area
• Collaborate, influence and guide partner teams on IAM-related features and architecture
• Showcase and hold a high bar for quality, speed, and sound technical decisions

As a Staff Software Engineer - Identity & Access Management, you have:

• 10+ years of industry experience designing, building, and supporting large-scale distributed systems in production, with recent experience in building large scale cloud services.
• Deep knowledge and experience with one or more areas of identity and access management such as authentication, authorization, etc. Knowledge of industry standard security concepts and protocols like SAML, SCIM, OAuth, OIDC, Federation and RBAC is a plus.
• Experience with database systems and database internals, such as query engines and optimizers are a big plus.
• Extremely strong fundamental computer science skills.
• Strong development skills in Java, C# or C++ preferred.
• Advanced degree in Computer Science or related field.

Every Snowflake employee is expected to follow the company's confidentiality and security standards for handling sensitive data. Snowflake employees must abide by the company's data security plan as an essential part of their duties. It is every employee's duty to keep customer information secure and confidential.

Snowflake is growing fast, and we're scaling our team to help enable and accelerate our growth. We are looking for people who share our values, challenge ordinary thinking, and push the pace of innovation while building a future for themselves and Snowflake.

How do you want to make your impact?

For jobs located in the United States, please visit the job posting on the Snowflake Careers Site for salary and benefits information: careers.snowflake.com

The following represents the expected range of compensation for this role:

• The estimated base salary range for this role is $236,000 - $339,200.
• Additionally, this role is eligible to participate in Snowflake's bonus and equity plan.

The successful candidate's starting salary will be determined based on permissible, non-discriminatory factors such as skills, experience, and geographic location. This role is also eligible for a competitive benefits package that includes: medical, dental, vision, life, and disability insurance; 401(k) retirement plan; flexible spending & health savings account; at least 12 paid holidays; paid time off; parental leave; employee assistance program; and other company benefits.

To comply with pay transparency requirements and other statutes, you can notify us if you believe that a job posting is not compliant by completing this form.