About Salesforce

We're Salesforce, the Customer Company, inspiring the future of business with AI+ Data +CRM. Leading with our core values, we help companies across every industry blaze new trails and connect with customers in a whole new way. And, we empower you to be a Trailblazer, too - driving your performance and career growth, charting new paths, and improving the state of the world. If you believe in business as the greatest platform for change and in companies doing well and doing good- you've come to the right place.

Role Description

The Security team is building products for various network security controls and management in our public cloud data centers (AWS,GCP). Our mission is to develop highly-available and performant cloud scale distributed systems to provide security at the network level in our private and public clouds, including micro-segmentation, network policy distribution, access control at the host/device level, distributed firewall, etc. The candidate will be working on by leading the team on the technical front to active above mission in our public cloud infrastructure.

Key Responsibilities :

Architect and implement distributed systems to deliver security controls at the network level in Salesforce's private clouds. Such solutions cover but are not limited to network policy management, ACLs enforcement, distributed firewalls, L7 Firewalls, DDoS, and network protection for bare metal servers, containers, and VMs

Develop software solutions and microservices to support our network security platforms at one or more of the following levels: low-level OS components, datacenter distributed platforms, user interfaces

Advance and operate these security platforms in a full DevOps model, using Agile/Scrum Development methodology and most importantly supporting he team's engineering excellence by performing code reviews and mentoring junior team members.

Key Skills :

Industry experience. 6+ years

3+ years experience in Network Security software product developement.

2+ years experience in Cloud(SaaS, PaaS or IaaS) software development.

1+ years experience in a high-availability 24/7 environment (cloud platforms are a plus)

Education. M.Sc/M.Eng in Computer Science/Engineering or B.A/B.Sc. in same disciplines with equivalent years of experience

Distributed systems. Expertise in designing, implementing and operated distributed systems architectures and concepts, including any of the following:

High-performance, high-availability (99.999%) and self-recoverable systems

Control, orchestration and automation platforms

RPC frameworks (e.g., Protobuf/gRPC, Thrift, Bond)

Consensus and consistency frameworks (e.g., Paxos, Raft, strong/eventual consistency)

Data-processing systems (e.g., Lambda architecture, Kafka, RabbitMQ, ELK)

Storage solutions (e.g., Cassandra, MongoDB, Hadoop, Redis, Zookeeper)

Network Security. Hands-on expertise in building or managing software platforms for network security, including segmentation, ACLs, DPI, DDoS protection. Examples include:

Strong knowledge in security fundamentals: authentication/authorization frameworks (e.g., SSO, SAML, Oauth), secure transport (e.g., SSL, TLS), identity management (e.g., certificates, PKI)

Software: iptables, ipsec, VPN, IDS

Hardware: switch ACLs, stateful firewalls, network segmentation, security zones

Networking. Industry-level expertise in any of the following networking aspects

VM and containers network stacks (OpenStack's Neutron, Cilium, Romana)

Network control planes and agents (Calico, Flannel, Contiv, Contrail, OVN)

OSI model and debugging network traffic

Networking protocols (TCP/UDP, HTTP, DNS, DHCP)

Datacenter network architecture at software platform and hardware devices (NAT, VXLAN, overlay/underlay)

Programming. Proficiency in object-oriented and multi-threaded programming in at least one of the following languages: Golang, C++, Python, Java

Software design. Demonstrated expertise in applying systems patterns (e.g., Client-server, N-tier, Master/Slave, MVC) and API constructions (e.g., Swagger, OpenAPI)

Operating systems. Development and software management on Linux systems (e.g., CentOS, RHEL)

DevOps mindset and strong ownership over owned code (test, monitor, deploy, maintain)

Communication. Excellent oral and written communication skills

Team. Ability to value team success beyond personal contributions

Full-software ownership from idea to running in production: design, code, writing unit tests, performing integration tests, deploying to production, supporting the system in the production environments

Nice to Have Skills :

Platform development. Proven track of designing and coding large-scale PaaS or IaaS systems, especially for public cloud providers (e.g., AWS, Azure, GCP)

VMs/Containers. Hands-on experience with VMs and container technologies (e.g., OpenStack, Docker, Kubernetes)

Agile/Scrum way of delivery

Accommodations

If you require assistance due to a disability applying for open positions please submit a request via this Accommodations Request Form.

Posting Statement

At Salesforce we believe that the business of business is to improve the state of our world. Each of us has a responsibility to drive Equality in our communities and workplaces. We are committed to creating a workforce that reflects society through inclusive programs and initiatives such as equal pay, employee resource groups, inclusive benefits, and more. Learn more about Equality at www.equality.com and explore our company benefits at www.salesforcebenefits.com.

Salesforce is an Equal Employment Opportunity and Affirmative Action Employer. Qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender perception or identity, national origin, age, marital status, protected veteran status, or disability status. Salesforce does not accept unsolicited headhunter and agency resumes. Salesforce will not pay any third-party agency or company that does not have a signed agreement with Salesforce.

Salesforce welcomes all.