Senior Manager, Software Engineering - Authentication Platform
What you'll need to apply
Fields this application requires
Company-specific questions
- Do you have the unrestricted right to work in the country to which you're applying? (You must answer “No” if you are on any visa or possess any government issued work authorization document that has an expiration date; you should answer “Yes” if you have DACA or TPS authorization in the US)
- Government Employment: In the last 5 years, have you been an employee of a U.S. federal, state, or local government, including a "special Government employee" (defined under 18 U.S.C. §202), or a member of the U.S. Armed Services (including Reserve and Guard components)?
- I attest/confirm that I have no post-government employment restrictions currently applicable to me that have not already been addressed or disclosed in the previous questions, OR that if I am aware of any applicable restrictions, I will disclose them to the recruiter if contacted for further processing of my application. If I received written advice from my current or former government employer about work restrictions that are still active, I will provide it to the recruiter if contacted for further processing of my application.
- Are you currently or have you in the past been debarred, suspended, proposed for debarment or declared ineligible for award of a contract by any federal agency?
- As a U.S. company that exports software and technology internationally, we must comply with U.S. export control laws in every country where we operate. The information provided will be used to determine whether we need to obtain an Export Control License for your employment if you are hired. Are you a citizen, national or permanent resident of Iran, Cuba, North Korea or Syria?
- Regarding future positions at Salesforce, please select one of the following options
- I acknowledge that I have read, reviewed and answered the above questions truthfully and accurately. I further understand, and agree, that any offer of employment I may receive from Salesforce is conditional on the truth of the above statements and that, in the event it is subsequently determined that any of the above is inaccurate, any such offer of employment can be rescinded and, in the event I have commenced employment, such employment will be terminated, to the extent permitted by applicable law. Please select "yes" if you acknowledge.
About this role
Employer-provided description, formatted for easier reading.
Location
Bellevue, WA
The Experience
The Authentication Platform Engineering Manager leads the team responsible for the core identity services that power Salesforce's production infrastructure, including Kerberos-based authentication, Time-based One-Time Password (TOTP), and Fast Identity Online 2 (FIDO2) systems.
This role sits at the heart of our Production Identity and Access Management (IAM) stack, ensuring every access request across our global fleet is secure, authenticated, and resilient. You will manage a team of specialists who bridge legacy infrastructure protocols and modern, cloud-native identity standards to defend against sophisticated threats.
What You'll Actually Be Doing
- Drive the strategy and execution for the Authentication Platform, ensuring these foundational services scale horizontally across diverse environments.
- Provide technical leadership across a diverse protocol stack, from Kerberos and Lightweight Directory Access Protocol (LDAP) to modern WebAuthn/FIDO2 and TOTP implementations.
- Guarantee the reliability of services that are foundational dependencies for the entire company, targeting high availability standards.
- Partner with security architects to implement Zero Trust principles, ensuring the platform enforces strict adherence to least privilege and robust identity verification.
- Develop each engineer's ability to work effectively in an AI-augmented environment, moving beyond tracking output to actively coaching growth into higher-level system design and architecture work.
- Own how AI tools are integrated into the team's daily development cycle, including configuration, feedback loops, and the judgment calls about when human review is required to validate output.
- Serve as the guardian of architectural integrity, security best practices, and technical standards as AI increases code volume, coaching engineers to critically audit AI-generated code for logic flaws, vulnerabilities, and performance issues.
You're Our Person If...
- You have 13+ years of software engineering experience, including 3-5 years leading teams in high-pressure, infrastructure-centric environments.
- You have proven expertise in Kerberos and identity protocols such as Security Assertion Markup Language (SAML), OpenID Connect (OIDC), and LDAP.
- You have experience managing systems with massive throughput and high-availability requirements in public cloud (AWS/GCP) or hybrid environments.
- You're familiar with Java, Go, or C#, and have experience with container orchestration (Kubernetes) and modern continuous integration/continuous deployment (CI/CD) pipelines.
- You have active, hands-on proficiency with AI development tools; full utilization is the baseline expectation, along with deep technical expertise sufficient to evaluate architectural integrity and make informed decisions about AI-generated output.
- You have experience assessing candidates on their ability to formulate effective prompts, evaluate AI outputs, and orchestrate multi-agent workflows in addition to foundational technical skills.
Even Better If...
- You have experience building or maintaining enterprise-grade Identity Providers (IdP) or Multi-Factor Authentication (MFA) platforms.
- You understand hardware security modules (HSMs), public key infrastructure (PKI), and secure credential storage.
- You have knowledge of how authentication systems meet Payment Card Industry (PCI), SOC2, or Health Insurance Portability and Accountability Act (HIPAA) requirements.
- You have experience managing on-call rotations for high-visibility production services, and a track record of hiring and growing senior engineering talent.