Principal Software Engineer - Platform Security

Principal Software Engineer – Platform Security

Our Database Platform Security team is dedicated to building best‑in‑class security solutions for the Snowflake platform. We focus on three key areas:

• Zero Trust/Network Security: We ensure secure access from/to Snowflake to customer environments through features like network policies and private links.
• Key Management: We provide a robust crypto infrastructure for all customer data and metadata, offering key rotation, rekeying, and advanced Tri‑secret Sharing for Bring Your Own Key (BYOK) capabilities.
• Secret Management: This is a new and rapidly growing area where we are building functionality for secure storage and management of secrets like OAuth tokens and credentials within Snowflake.

• Lead highly impactful initiatives from idea formulation to design and implementation.
• Innovate, design and build highly available, reliable, and secure distributed services and solutions within the global Snowflake platform.
• Ensure operational readiness of services, leading incident management and mitigation discussions including meeting customer commitments for security, reliability, availability, and performance.
• Mentor and coach other engineers.

• 15+ years of industry experience designing, building, and supporting large‑scale distributed systems in production, with recent experience in building large‑scale cloud services.
• Knowledge and experience with different security, governance, privacy and compliance areas is a plus.
• Strong fundamentals in computer science skills.
• Expert‑level development skills in Java.
• Advanced degree in Computer Science or related degree.
• Ph.D. in a related field is a plus.

Every Snowflake employee is expected to follow the company’s confidentiality and security standards for handling sensitive data. Snowflake employees must abide by the company’s data security plan as an essential part of their duties. It is every employee’s duty to keep customer information secure and confidential.