(usa) Senior Software Engineer, Information Security

Walmart Walmart · Retail · Bentonville, AR

Senior Software Engineer role focused on designing, building, and scaling secure enterprise authentication solutions, specifically Phishing-Resistant MFA and certificate-based authentication. The role involves developing scalable services and automation for registration, lifecycle management, and enforcement, integrating with various identity systems, and mentoring junior engineers.

What you'd actually do

  1. Design, build, and maintain scalable services supporting MFA, PR-MFA, and CBA
  2. Implement secure registration, recovery, lifecycle, and enforcement workflows
  3. Contribute to enterprise-scale rollout strategies for phishing-resistant MFA and certificate-based authentication
  4. Integrate MFA capabilities into identity providers, SSO platforms, VPN solutions, and endpoint systems
  5. Apply FIDO2/passkey and CBA (PKI, certificates) concepts in production systems

Skills

Required

  • Software engineering experience building scalable, resilient enterprise-grade services and APIs
  • Delivering distributed systems at scale in production environments
  • Designing APIs, automation workflows, and backend services with observability and reliability
  • Mentoring junior engineers and actively share knowledge
  • Collaboration skills
  • Modern authentication technologies
  • Bachelor’s degree in Computer Science, Information Technology, or related field and 5 years' experience in information technology within the past 10 years OR 7 years' experience in information technology or related field within the past 10 years.

Nice to have

  • Experience building highly available, fault-tolerant distributed systems
  • Experience with cloud-native architectures and CI/CD automation
  • Experience working in large enterprise environments with complex identity ecosystems
  • Exposure to compliance and security frameworks impacting authentication systems
  • Certified Intrusion analyst (GCIAs)
  • GIAC Certified Enterprise Defender (GCED)
  • Certified Geographic Information Systems Professional (GISP)
  • GIAC Certified Incident Handler (GCIH)
  • Certified Information Systems Security Professional (CISSP)
  • Certified Information Systems Auditor (CISA)
  • GIAC Security Essentials Certification (GSEC)
  • Security+ certification
  • Leading Technical Team
  • Mainframe Technology
  • Professional certification in information technology relevant to the job under consideration (for example, Java, C/C++, mainframe technologies, SAP, Microsoft .Net, business intelligence tools, SQL technology)
  • Programming language or languages (for example, Java, C/C++, .NET, Rexx, Cobol, Powershell)
  • SAP
  • SQL technology
  • Version control software (for example, Subversion, Git, Librarian)
  • Creating inclusive digital experiences
  • implementing Web Content Accessibility Guidelines (WCAG) 2.2 AA standards
  • assistive technologies
  • integrating digital accessibility seamlessly

What the JD emphasized

  • scalable services
  • automation
  • enterprise-scale rollout
  • identity providers
  • SSO platforms
  • endpoint systems
  • FIDO2/passkey
  • CBA (PKI, certificates)
  • hardware authenticator enrollment
  • adoption, rollout health, reliability, and security posture
  • architectural design
  • long-term technical strategy
  • mentor junior engineers
  • engineering best practices
  • code reviews
  • documentation
  • knowledge-sharing sessions
  • scalable, resilient enterprise-grade services and APIs
  • distributed systems at scale in production environments
  • APIs, automation workflows, and backend services with observability and reliability
  • cloud-native architectures
  • CI/CD automation
  • large enterprise environments
  • complex identity ecosystems
  • compliance and security frameworks impacting authentication systems