Staff Software Engineer, Identity & Access Management

Snowflake Snowflake · Data AI · WA-Bellevue, United States · Engineering

Staff Software Engineer for Snowflake's Identity & Access Management team, focusing on building AI security capabilities for agentic enterprise workflows. The role involves designing and implementing authentication and authorization features, leading cross-team projects, and ensuring secure data sharing and access control within Snowflake's Data Cloud.

What you'd actually do

  1. Design and implement critical AI security capabilities for controlled, audited, restricted agent workflows, both inbound and outbound.
  2. Design and implement features that provide critical identity and access management capabilities, including integration with the next generation identity providers and authentication protocols.
  3. Build authorization frameworks to provide fine grained access control, which can scale to seamlessly managing millions of objects and users.
  4. Design and develop solutions for seamless and secure data sharing, access to applications running in snowflake, and access via external applications
  5. Lead and deliver multi-engineer x-team projects, including managing low-level project planning and execution

Skills

Required

  • 10+ years of industry experience designing, building, and supporting large-scale distributed systems in production, with recent experience in building large scale cloud services.
  • Deep knowledge and experience with one or more areas of identity and access management such as authentication, authorization, etc.
  • Extremely strong fundamental computer science skills.
  • Strong development skills in Java, C# or C++ preferred.
  • Advanced degree in Computer Science or related field.

Nice to have

  • Knowledge of industry standard security concepts and protocols like SAML, SCIM, OAuth, OIDC, Federation and RBAC is a plus.
  • Experience with database systems and database internals, such as query engines and optimizers are a big plus.

What the JD emphasized

  • critical AI security capabilities
  • controlled, audited, restricted agent workflows
  • critical identity and access management capabilities
  • fine grained access control
  • seamless and secure data sharing
  • multi-engineer x-team projects
  • high-quality code and design reviews
  • shaping the strategic direction
  • guide partner teams on IAM-related features and architecture
  • high bar for quality, speed, and sound technical decisions