Staff Software Engineer, Identity & Access Management

At Snowflake, we are powering the era of the agentic enterprise. To usher in this new era, we seek AI-native thinkers across every function who are energized by the opportunity to reinvent how they work. You don’t just use tools; you possess an innate curiosity, treating AI as a high-trust collaborator that is core to how you solve problems and accelerate your impact. We look for low-ego individuals who thrive in dynamic and fast-moving environments and move with an experimental mindset — who rapidly test emerging capabilities to discover simpler, more powerful ways to deliver results. At Snowflake, your role isn't just to execute a function, but to help redefine the future of how work gets done. There is only one Data Cloud. Snowflake’s founders started from scratch and designed a data platform built for the cloud that is effective, affordable, and accessible to all data users. But it didn’t stop there. They engineered Snowflake to power the Data Cloud, where thousands of organizations unlock the value of their data with near-unlimited scale, concurrency, and performance. Easily analyze your unstructured data, build data agents and create ML workflows using a comprehensive suite of AI services, all within the same secure and governed environment as your data. This is our vision: a world with endless insights to tackle the challenges and opportunities of today and reveal the possibilities of tomorrow. The identity & access management (IAM) team’s charter is to enable our customers to confidently bring their most sensitive data and workloads to Snowflake. We provide the authentication https://docs.snowflake.com/en/user-guide/authentication-policies and authorization https://docs.snowflake.com/en/user-guide/security-access-control-overview capabilities for customers to secure their Snowflake accounts. We are heavily focused on critical AI adoption and security capabilities like Snowflake Intelligence access control, MCP server and clients, Agent identity, Admin guardrails for agents etc. Our feature set includes capabilities like user management, secret-less authentication for both human and service users, SSO integration with numerous IdPs, MFA, OAuth and OIDC support for 3P applications, and RBAC for granular access control. Our systems are critical to customer trust and maintaining Snowflake’s security, reliability and performance. The team culture is very collaborative with ample opportunities for growth and mentorship from Principal engineers. AS A STAFF SOFTWARE ENGINEER - IDENTITY & ACCESS MANAGEMENT, YOU WILL: - Design and implement critical AI security capabilities for controlled, audited, restricted agent workflows, both inbound and outbound. - Design and implement features that provide critical identity and access management capabilities, including integration with the next generation identity providers and authentication protocols. - Build authorization frameworks to provide fine grained access control, which can scale to seamlessly managing millions of objects and users. - Design and develop solutions for seamless and secure data sharing, access to applications running in snowflake, and access via external applications - Lead and deliver multi-engineer x-team projects, including managing low-level project planning and execution - Actively guide the team and partners via high-quality code and design reviews - Play a critical role in shaping the strategic direction for your product focus area - Collaborate, influence and guide partner teams on IAM-related features and architecture - Showcase and hold a high bar for quality, speed, and sound technical decisions AS A STAFF SOFTWARE ENGINEER - IDENTITY & ACCESS MANAGEMENT, YOU HAVE: - 10+ years of industry experience designing, building, and supporting large-scale distributed systems in production, with recent experience in building large scale cloud services. - Deep knowledge and experience with one or more areas of identity and access management such as authentication,