Skip to content

Salesforce

Washington - Bellevue; California - San Francisco; United States of America

Senior Manager, Software Engineering - Identity and Access Management

Posted 5 days ago

Level
Leadership
Experience
10+ years
Work style
Hybrid
Full-time
Pay
$172.5k to $260.1k

At a glance

The role in plain English

This senior management role leads the Identity and Access Management engineering team within Salesforce's Security Infrastructure group. The position suits experienced software engineering managers with a background in IAM, cloud platforms, and compliance frameworks. Day-to-day work includes leading a team, collaborating with engineering and business partners, and overseeing the design, deployment, and operation of IAM services across cloud environments. The role is hybrid, based in San Francisco or Bellevue.

What you'll do

  • Lead and mentor an IAM engineering team using Agile methodologies
  • Set goals for provisioning, deprovisioning, and access management improvements
  • Design, test, deploy, and operate the IAM stack with partners
  • Hire, develop, and evaluate direct reports
  • Drive platforms to assess code and third-party package security

What they're looking for

Essential

  • 10+ years industry experience
  • 3+ years managing software engineering teams
  • Experience with AWS, Azure, or GCP
  • Experience with Kubernetes and Terraform
  • Knowledge of authentication standards and compliance frameworks

Nice to have

  • 5+ years managing IAM teams
  • Experience with Privileged Access Management
  • Experience designing cloud-scale IAM services
  • Experience with federation protocols

Core skills

  • IAM
  • Kubernetes
  • Terraform
  • Go
  • Java
  • AWS
  • Azure
  • GCP

The shape of the job

Technical depth

4/5

FoundationalSpecialist

Pace

4/5

SteadyFast-moving

Ownership

4/5

GuidedSelf-directed

Teamwork

4/5

Heads-downHighly collaborative

Cyberend's reading of the listing, not the employer's own scores.

How the pay compares

In line with similar roles

Compared with 21 open leadership roles in the US on Cyberend that state their pay.

This role

$173k to $260k a year

  • This role
  • Typical range ($194k to $249k)

Application toolkit

Make your application count

See which requirements your CV meets and what is missing.

Your CV is used for this answer only and never stored.

Questions to prepare for

  1. 01Describe your experience leading IAM engineering teams in a 24/7 environment.
  2. 02How have you implemented role-based access control in cloud environments?
  3. 03What approaches have you used to improve compliance with NIST or ISO 27001?
  4. 04How do you ensure secure provisioning and deprovisioning of privileged access?

About Salesforce

Salesforce builds customer relationship management (CRM) software and related enterprise cloud solutions. The company operates globally and serves a wide range of industries.

Full job descriptionAs published by Salesforce

To get the best candidate experience, please consider applying for a maximum of 3 roles within 12 months to ensure you are not duplicating efforts.

Job Category

Software Engineering

Job Details

About Salesforce

Salesforce is the #1 AI CRM, where humans with agents drive customer success together. Here, ambition meets action. Tech meets trust. And innovation isn’t a buzzword — it’s a way of life. The world of work as we know it is changing and we're looking for Trailblazers who are passionate about bettering business and the world through AI, driving innovation, and keeping Salesforce's core values at the heart of it all.

Ready to level-up your career at the company leading workforce transformation in the agentic era? You’re in the right place! Agentforce is the future of AI, and you are the future of Salesforce.

The Experience

  • The Senior Manager, Software Engineering role is part of our Security Infrastructure organization, within the Identity and Access Management (IAM) engineering team. You will lead the team that builds and runs services providing context-aware, just-in-time access and governance across Salesforce production infrastructure.
  • You will shape our next generation IAM platform, enforcing security policies based on real-time context. You will partner with Site Reliability and engineering teams to build cloud-agnostic tooling that keeps Salesforce secure and highly available.
  • Your near-term focus is how IAM services deploy across first-party and public cloud environments. Your longer-term focus is strengthening our security posture to improve our National Institute of Standards and Technology Cybersecurity Framework (NIST CSF) score.
  • This role is based in San Francisco, CA or Bellevue, WA and is eligible for a hybrid work arrangement.

What You’ll Actually Be Doing

  • Lead and mentor an engineering team that owns its services end to end, following Agile methodologies, including 24/7 operations and root cause investigations.
  • Set goals and deliverables for improving provisioning and deprovisioning, privileged access management, role- and policy-based access control, and access appropriateness.
  • Design, test, deploy, and operate the IAM stack with engineering and business partners to deliver one enterprise identity solution for Salesforce.
  • Hire, develop, and evaluate direct reports, and drive platforms that continuously assess the security of code and third-party packages used by Salesforce engineers.

You’re Our Person If...

  • You have 10+ years of industry experience, including at least 3 years managing software engineering teams.
  • You have hands-on or team-leadership experience with a major public cloud platform (AWS, Azure, or Google Cloud Platform), Kubernetes, and Infrastructure-as-Code (Terraform), plus experience building scalable, highly available platforms in Go or Java.
  • You have working knowledge of authentication standards (SAML, OpenID Connect, OAuth 2.0), identity lifecycle management, and compliance frameworks such as NIST and ISO 27001.
  • You have led complex programs with cross-functional stakeholders in a matrixed organization, and you have experience in a 24/7 environment with structured change management.

Even Better If...

  • You have 5+ years managing identity and access management teams.
  • You have experience with Privileged Access Management (PAM) and control plane and data plane access flows in public cloud environments.
  • You have experience designing cloud-scale IAM services, including single sign-on, multi-factor authentication, and authorization, and with federation protocols such as WS-Federation.
  • You have experience driving strategy and using open-source technologies.

Unleash Your Potential

When you join Salesforce, you’ll be limitless in all areas of your life. Our benefits and resources support you to find balance and be your best , and our AI agents accelerate your impact so you can do your best . Together, we’ll bring the power of Agentforce to organizations of all sizes and deliver amazing experiences that customers love. Apply today to not only shape the future — but to redefine what’s possible — for yourself, for AI, and the world.

Accommodations

If you need a reasonable accommodation during the application or the recruiting process, please submit a request via this Accommodations Request Form .

Please note that Salesforce uses artificial intelligence (AI) tools to help our recruiters assess and evaluate candidates’ resumes and qualifications throughout the recruiting process. Humans will always make any candidate selection and hiring decisions. Please see our Candidate Privacy Statement for more information about how we use your personal data and your rights, including with regard to use of AI tools and opt out options.

Posting Statement

Salesforce is an equal opportunity employer and maintains a policy of non-discrimination with all employees and applicants for employment. What does that mean exactly? It means that at Salesforce, we believe in equality for all. And we believe we can lead the path to equality in part by creating a workplace that’s inclusive, and free from discrimination. Know your rights: workplace discrimination is illegal. Any employee or potential employee will be assessed on the basis of merit, competence and qualifications – without regard to race, religion, color, national origin, sex, sexual orientation, gender expression or identity, transgender status, age, disability, veteran or marital status, political viewpoint, or other classifications protected by law. This policy applies to current and prospective employees, no matter where they are in their Salesforce employment journey. It also applies to recruiting, hiring, job assignment, compensation, promotion, benefits, training, assessment of job performance, discipline, termination, and everything in between. Recruiting, hiring, and promotion decisions at Salesforce are fair and based on merit. The same goes for compensation, benefits, promotions, transfers, reduction in workforce, recall, training, and education.

In the United States, compensation offered will be determined by factors such as location, job level, job-related knowledge, skills, and experience. Certain roles may be eligible for incentive compensation, equity, and benefits. Salesforce offers a variety of benefits to help you live well including: time off programs, medical, dental, vision, mental health support, paid parental leave, life and disability insurance, 401(k), and an employee stock purchasing program. More details about company benefits can be found at the following link: https://www.salesforcebenefits.com.Pursuant to the San Francisco Fair Chance Ordinance and the Los Angeles Fair Chance Initiative for Hiring, Salesforce will consider for employment qualified applicants with arrest and conviction records.

At Salesforce, we believe in equitable compensation practices that reflect the dynamic nature of labor markets across various regions.

The typical base salary range for this position is $172,500 - $260,100 annually. In select cities within the San Francisco and New York City metropolitan area, the base salary range for this role is $207,800 - $285,800 annually.

The range represents base salary only, and does not include company bonus, incentive for sales roles, equity or benefits, as applicable.

  • Salesforce

    Posted 3 days ago

    Lead Product Security Engineer

    Ireland - Dublin; Ireland · On-site

    Lead secure development practices, threat modeling, and architecture reviews for Salesforce product teams. Requires expertise in application security, code review, and advising engineering leaders, with experience in Java, C, and cloud security.

    SeniorThreat modellingCode reviewCloud security
  • California - San Francisco and 2 more · Hybrid · $257.5k to $451.7k

    Lead the product security engineering vision, strategy, and operations for Salesforce's customer-facing products, partnering with security and engineering executives. Requires experience building and scaling product security programs at large enterprise technology companies.

    LeadershipProduct securityCloud securityRisk management
  • Texas - Dallas and 7 more · Hybrid · $197.3k to $313.7k

    Lead a team of Security Partners as the Business Information Security Officer for major business units, acting as the primary security advisor to senior technical and business leaders. Requires technical leadership experience and the ability to influence architecture and controls.

    LeadershipRisk managementCloud securityApplication security
  • Accenture

    Posted 3 days ago

    Senior Manager | Security for AI

    Madrid, Torre Chamartin; Spain · Hybrid

    Lead the design, governance, and security of AI solutions, including secure AI architectures and governance frameworks. Manage multidisciplinary teams and act as the senior technical authority for AI security initiatives. Location is Madrid, Spain.

    LeadershipAI securityCloud securityRisk management

Hand-picked cyber jobs, every morning.

Cyberend Daily sends a graduate, mid-level, senior and leadership role each day, alongside the security news worth knowing. Free.

Free beginner roadmap PDF when you join · No spam · Unsubscribe anytime