Principal Software Engineer – Identity

Salesforce

. Architect, design, implement, test, and deliver highly scalable authentication and session services on Salesforce Core using Java .

Posted 11/4/2026full-timeUnited StatesLead💰 $197,300 - $313,700 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in architecting and implementing scalable authentication and session services using Java, with a strong focus on security protocols and practices. Proficient in mentoring engineers and improving development processes while integrating AI tools into engineering workflows.

Highest-signal resume keywords

Java ProgrammingOAuth 2.0/2.1OpenID ConnectSAML 2.0Secure Coding Fundamentals

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Object-Oriented DesignApplied CryptographyAutomated TestingSQLHTML5JavaScriptJWT/JWS/JWESecurity HeadersAgile Software DevelopmentTest-Driven Development

Soft Skills

Interpersonal Skills

Tools & Technologies

JUnitSeleniumClaude CodeGitHub CopilotCodexCursor

Industry Keywords

Identity InfrastructureMFAPasswordless AuthenticationRegulated EnvironmentsSecurity Track Record

Tech Stack

Tools & technologies

CloudJavaJavaScriptJUnitSeleniumSQL

About the role

Key responsibilities & impact

Architect, design, implement, test, and deliver highly scalable authentication and session services on Salesforce Core using Java
Build and evolve standards-based identity protocols including OAuth 2.0/2.1, OpenID Connect, SAML 2.0, PKCE, DPoP, mTLS-bound tokens, token exchange, and DBSC
Harden sessions and credentials against hijacking, replay, phishing, and credential stuffing
Threat-model features, collaborate with Product Security, and remediate penetration-test, bug-bounty, and incident-review findings
Roll out security enforcement using feature flags, phased cohorts, telemetry, backward compatibility, and deprecation plans
Improve development processes, culture, and code base
Operate within the hybrid engineering model and ensure code quality
Mentor engineers in development technologies, tools, processes, and secure coding
Present designs and review designs from others
Develop test strategies, automation frameworks, and unit/functional tests, including negative and abuse-case tests
Participate in on-call rotation for authentication outages and security incidents
Build and ship production-grade software using modern engineering practices and AI development tools
Design complex systems where AI agents integrate into human workflows
Maintain shared system context for AI-assisted engineering
Evaluate human- and AI-generated code for correctness, quality, security, and performance

Requirements

What you’ll need

A related technical degree required
3+ years of professional software development experience; Senior Level: 5+ years, including ownership of production services
Strong Java and object-oriented design skills
Solid grasp of authentication and authorization basics, with hands-on experience with at least one of OAuth 2.0, OpenID Connect, or SAML
Working knowledge of applied cryptography, PKI, X.509 certificates, TLS/mTLS, JWT/JWS/JWE, and key management and rotation
Secure-coding fundamentals, including OWASP Top 10, CSRF, XSS, session fixation, open redirects, injection, timing side channels, and safe handling of secrets and PII
Understanding of browser security model, cookies, same-origin policy, CORS, CSP, and security headers
Proven understanding of JavaScript, HTML5, JSON, and HTTP
Understanding of SQL and relational database schema design
Automated testing experience using Java, JUnit, and Selenium
Demonstrated AI-first approach to engineering and responsible use of AI with security-sensitive code
Experience using AI tools such as Claude Code, GitHub Copilot, Codex, or Cursor
Advanced prompt engineering skills and ability to cultivate system context
Excellent interpersonal skills
Ability to work in person three days per week, or 10 days per quarter for some engineering teams
Experience with highly scalable web applications or identity infrastructure is an advantage
Experience with MFA and passwordless authentication is an advantage
Familiarity with identity RFCs and specifications is an advantage
Experience with HSMs, cloud KMS, or secrets-management systems is an advantage
Experience in regulated environments is an advantage
Security track record is an advantage
Agile software development and test-driven development experience is an advantage

Benefits

Comp & perks

Time off programs
Medical insurance
Dental insurance
Vision insurance
Mental health support
Paid parental leave
Life insurance
Disability insurance
401(k)
Employee stock purchasing program
Incentive compensation may be available for eligible roles
Equity may be available for eligible roles
Hybrid/flexible work arrangement
AI tools and resources to accelerate impact