Identity and Access Architect

We need a software architect with extensive experience designing and building highly resilient, available, and self-healing services in either GoLang or Java that has proven experience with modern day open cloud enterprise architecture including EKS cell-based architecture for active/active clusters, staggered deployments across regional/jurisdiction boundaries, fast rollbacks , event based workflows and near-real time replication of large volume data sets (100MB+). Similarly, familiarity with Identity Governance, Authentication and Authorization and open cloud security best practices is a must, starting with AWS.

The role will design a modern world class Identity and Access Management platform that protects our production environments from both internal and external threats with intelligence, leveraging best in industry solutions beyond tables takes such as MFA, passwordless authentication and hardware based session protection across open cloud platforms. This role will participate and be a key contributor to the Hyperforce Architectural Council and will be responsible for long range vision and planning for the Hyperforce Identity Management space. Research and investment on AI based decision making and usage pattern detection is expected.

Responsibilities:

• Work closely with strategic stakeholders such as Security, Legal, Global Regulatory Compliance, Infrastructure and external Partners and Vendors to distill solutions that address application feature gaps and enable compliance
• Deliver highly visible outcomes, while balancing time pressure and long term strategy
• Collaborate on and help drive critical security and compliance uplift projects through the establishment of standards, processes and frameworks that help maintain secure configurations
• Work collaboratively with fellow architects and engineering leads to create, evangelize and drive adoption of Long Range Plans inclusive of migration strategies
• Develop and promote a deep technical and business understanding of our mission
• Mentor team members to build core competencies in architecture, standards development, and recommended practices

Required Skills:

• 7+ years experience leading architecture with a distinguished track record on technically demanding projects
• Track record in delivering highly available, scalable, celluralized, resilient and self healing services running on open cloud platforms - AWS preferred
• Experience with Kubernetes, Docker and Terraform
• Ability to document designs comprehensively and intelligibly
• Ability to create Proof of Concept architecture with code
• Ability to code is a must (you will be tested) - Java or GoLang preferred
• Experience in communicating with users, other technical teams, and product management to understand requirements, describe software product features, and technical designs
• Proficiency with automating tasks using scripting/coding/tooling
• Strong understanding of linux operating systems (RHEL9)
• Strong understanding of Identity and Access Management subsystems including SSO, LDAP, MFA, FIDO2, Kerberos
• Strong understanding of control plane and data plane security best practices
• Experience with continuous integration platforms such as Jenkins, Spinnaker, Gitlab CI etc.
• Experience with monitoring tools (ELK, grafana, AppDynamics etc.)
• Experience working in an agile environment

Desired Skills:

• Experience with AWS account and permission management best practices
• Experience supporting security and compliance uplift campaigns
  
  **LI-Y

Accommodations

If you require assistance due to a disability applying for open positions please submit a request via this Accommodations Request Form.

Posting Statement

Salesforce is an equal opportunity employer and maintains a policy of non-discrimination with all employees and applicants for employment. What does that mean exactly? It means that at Salesforce, we believe in equality for all. And we believe we can lead the path to equality in part by creating a workplace that's inclusive, and free from discrimination. Know your rights: workplace discrimination is illegal. Any employee or potential employee will be assessed on the basis of merit, competence and qualifications - without regard to race, religion, color, national origin, sex, sexual orientation, gender expression or identity, transgender status, age, disability, veteran or marital status, political viewpoint, or other classifications protected by law. This policy applies to current and prospective employees, no matter where they are in their Salesforce employment journey. It also applies to recruiting, hiring, job assignment, compensation, promotion, benefits, training, assessment of job performance, discipline, termination, and everything in between. Recruiting, hiring, and promotion decisions at Salesforce are fair and based on merit. The same goes for compensation, benefits, promotions, transfers, reduction in workforce, recall, training, and education.

Pursuant to the San Francisco Fair Chance Ordinance and the Los Angeles Fair Chance Initiative for Hiring, Salesforce will consider for employment qualified applicants with arrest and conviction records.

For Washington-based roles, the base salary hiring range for this position is $230,700 to $351,800.

For California-based roles, the base salary hiring range for this position is $251,900 to $384,100.

Compensation offered will be determined by factors such as location, level, job-related knowledge, skills, and experience. Certain roles may be eligible for incentive compensation, equity, benefits. More details about our company benefits can be found at the following link: https://www.salesforcebenefits.com.