Senior Software Engineer (Identity, Data Security and Trust)

Join Snowflake as a Senior Software Engineer in the Identity, Data Security and Trust organization. You will design and implement critical AI security capabilities, build foundational identity and access management systems, and develop core security infrastructure. You will also build and maintain security tooling, design extensible platform components, and partner with engineering teams across the company. The role requires 5+ years of industry experience, proficiency in programming languages, and knowledge of identity and access management concepts.

• Design and implement critical AI security capabilities, including controlled, audited agent workflows, MCP server and client security, agent identity frameworks, and admin guardrails.
• Build and evolve foundational identity and access management systems, including authentication protocols, SSO integrations, multi-factor authentication, OAuth/OIDC, SAML, SCIM, and fine-grained RBAC.
• Build and maintain security tooling to define, monitor, enforce, and detect policy violations across the platform; implement automation and self-service processes that increase developer autonomy and promote secure-by-default engineering.
• Experience shipping and on-calling production services with a focus on availability, reliability, and observability
• A collaborative, low-ego approach to engineering — comfortable iterating quickly and working across PM, design, and peer engineering teams
• 5+ years of industry experience designing, building, and operating large-scale distributed systems in production cloud environments
• Strong foundational computer science skills — data structures, algorithms, systems design, and distributed computing
• BS in Computer Science, Computer Engineering, or a related technical discipline, or equivalent practical experience
• Proficiency in one or more of Java, C++, Python, Golang, or Rust, with solid SQL skills for data-driven features
• Knowledge of identity and access management concepts and protocols — SAML, SCIM, OAuth, OIDC, Federation, MFA, or RBAC
• Familiarity with security infrastructure domains such as secret management, key management, service identity, authentication, or authorization
• Experience with database internals, query engines, or data platform systems
• Exposure to machine learning or AI systems, particularly applied to anomaly detection, behavioral analytics, or risk classification
• Contributions to developer platforms, SDKs, or multi-tenant extensibility frameworks
• Experience deploying and operating services on Kubernetes or production cloud platforms (AWS, Azure, or GCP)