Software Engineering MTS

#
** Authentication Platform — Software Engineer (MTS)
**** About the team
** The Authentication Platform team owns the core identity services for Salesforce's production infrastructure — the Production IAM stack. The portfolio spans Kerberos-based authentication, TOTP, and FIDO2/Web Authn, bridging legacy infrastructure protocols and modern cloud-native identity standards. Because the platform is a tier-0 dependency for the entire company, we run at massive throughput with a 4+ nines availability target across Public Cloud (AWS/GCP) and hybrid deployments on Kubernetes, with modern CI/CD.

Our security posture is Zero Trust and least-privilege by default, and we partner closely with security architects on identity verification and credential-handling design.
** About the role
** You'll work on services in the Production IAM stack as an individual contributor — implementing features across the Kerberos, TOTP, and FIDO2/Web Authn service portfolio, contributing to designs that senior engineers lead, and taking on-call for a tier-0 platform. This is a hands-on engineering role focused on strong execution, growing technical depth in identity protocols, and shipping high-quality, well-tested code in a security-critical environment.
** What you'll do**  - Deliver features across the Authentication Platform's service portfolio -  Kerberos, TOTP, FIDO2/Web Authn - writing clean, well-tested backend code in Java, Go, or C#.  - Contribute to design specs and research spikes for features in your area, alongside more senior engineers who lead the design.  - Implement identity and federation protocols used by the platform, including Kerberos, LDAP, Web Authn/FIDO2, and TOTP.

Familiarity with SAML/OIDC is useful for interop conversations with adjacent teams.  - Partner with the Product Owner and tech lead on story-level scope, sequencing, and dependencies for your own work, and help refine and clarify work items before they land in a sprint.

- Reliably deliver as a developer, reviewer, and tester — high test coverage, clean code, and reviews that catch issues before they land, with a security-first mindset appropriate for tier-0 services.  - Apply Salesforce engineering best practices to code, tests, and CI/CD pipelines. Leave code in better shape than you found it.  - Use AI development tools (e.g.Claude Code) in your day-to-day workflow, and critically evaluate both human and AI-generated code for correctness, performance, and security compliance.  

- Analyze and fix bugs in your area, working with more senior engineers on the complex ones. Debug production issues and drive them to a fix.  - Exhibit ownership beyond just coding your features — an active role in testing, review, and monitoring is part of the job, especially given the tier-0 nature of the platform.

- Participate in the on-call rotation for the Authentication Platform and handle common alerts confidently. On-call is a real, high-visibility part of this role because of the platform's tier-0 status.  - Understand the platform's telemetry — metrics, logs, traces, SLIs — and extend it for the features you own. The availability target is 4+ nines.  - Contribute to Root Cause Analyses for incidents in your area, and follow through on assigned action items.

- Work with internal stakeholders — service teams and infrastructure owners who depend on the Authentication Platform — to answer integration questions about the features you own.  - Author and maintain technical documentation and runbooks for your work.

** Minimum Requirements**  - Strong programming ability in Java, Go, or C#, with production experience building backend services.  - Working knowledge of at least one identity or federation protocol from this set:
Kerberos, LDAP, Web…