Principal, Software Engineer, Information Security

Walmart Walmart · Retail · Bangalore, KA, India

Seeking a Principal Software Engineer to architect and deliver scalable and secure enterprise authentication solutions, focusing on Phishing-Resistant MFA (PR-MFA) using FIDO2, passkeys, hardware authenticators, and certificate-based authentication (CBA). The role involves defining MFA architecture, building software for secure registration, lifecycle management, recovery, and rollout at scale, and partnering across security, endpoint, and associate experience teams.

What you'd actually do

  1. Own the enterprise MFA architecture, including PR-MFA and certificate-based authentication
  2. Design and operate services supporting registration, lifecycle, recovery, and break-glass
  3. Define PR-MFA rollout patterns that drive adoption with strong assurance
  4. Integrate MFA across IdP, SSO, VPN, Windows, macOS, iOS, and Android
  5. Apply FIDO2/passkey concepts (WebAuthn, CTAP, attestation) and CBA concepts (PKI, certificate lifecycle, trust chains)

Skills

Required

  • Strong software engineering experience building enterprise-grade, high-scale services and APIs
  • Deep understanding of authentication and MFA fundamentals, assurance levels (AAL2/AAL3), and context-aware and risk-based MFA patterns
  • Strong knowledge of MFA threats (phishing, MFA fatigue, relay attacks, recovery abuse)
  • Hands-on experience implementing PR-MFA using FIDO2 security keys and passkeys
  • Hands-on experience implementing PR-MFA using Certificate-based authentication (CBA) using PIV / Smart Cards and X.509 certificates
  • Deep experience across Windows, macOS, iOS, and Android platforms (including Windows Hello for Business and platform authenticators)
  • Proven ability to design MFA for large, diverse enterprise user populations
  • Ability to evaluate security, usability, and operational tradeoffs
  • Strong awareness of industry standards and trends (FIDO Alliance, PIV, NIST 800-63, Zero Trust, PKI-based authentication)
  • Lead hardware authenticator (YubiKey) programs, including enrollment and recovery
  • Define and track adoption and friction metrics
  • Serve as a technical authority and mentor senior engineers
  • Bachelor's degree in a related field and 14+ years experience in software engineering and/or cybersecurity with deep IAM focus

Nice to have

  • Master’s degree in computer science, computer engineering, computer information systems, software engineering, or related area and 3 years' experience in software engineering or related area.
  • background in creating inclusive digital experiences

What the JD emphasized

  • Phishing-Resistant MFA (PR-MFA)
  • FIDO2
  • passkeys
  • hardware authenticators
  • certificate-based authentication (CBA)
  • FIDO2 security keys and passkeys
  • Certificate-based authentication (CBA) using PIV / Smart Cards and X.509 certificates
  • Windows Hello for Business and platform authenticators
  • FIDO2/passkey concepts (WebAuthn, CTAP, attestation)
  • CBA concepts (PKI, certificate lifecycle, trust chains)
  • hardware authenticator (YubiKey) programs