STAFF, SOFTWARE ENGINEER, INFORMATION SECURITY

About The Team The Information Security team has the critical responsibility of ensuring that customers and associates can securely and seamlessly access Walmart systems. Within this organization, the Identity and Access Management (IAM) team builds and operates the authentication, authorization, and federation platforms that power secure access across enterprise and customer-facing applications.

The Single Sign-On (SSO) Engineering team is responsible for designing, building, and operating highly scalable identity platforms that provide secure, resilient, and intelligent authentication experiences across web, mobile, APIs, workforce, and partner ecosystems.

As identity threats evolve, we are increasingly leveraging Agentic AI and intelligent automation to enhance authentication decisions, detect anomalous access patterns, and dynamically enforce policies in real time.

We are looking for a Staff Engineer who is passionate about building secure, high-availability authentication systems at enterprise scale — and who can help shape the next generation of AI-enabled identity platforms.

What You’ll Do

Lead the secure design and development of scalable SSO and federation platforms, partnering closely with IAM, application, platform, and security engineering teams.

Architect and implement authentication and identity solutions using standards such as OAuth 2.0, OpenID Connect (OIDC), SAML 2.0, SCIM, and LDAP/AD.

“Design and build high-performance authentication services using Java, Go, Python, and modern frontend technologies, integrating with REST APIs and identity stores.

Develop and enhance identity lifecycle flows including login, MFA, adaptive authentication, token issuance/validation, session management, and secure logout.

Drive modernization initiatives such as Zero Trust authentication, password less authentication (FIDO2/WebAuth), and device trust integration.

Design and implement AI-driven adaptive authentication mechanisms that leverage behavioral signals, contextual risk scoring, and anomaly detection.

Partner with data science and security teams to build Agentic AI capabilities that:

Dynamically adjust access policies based on risk posture

Detect credential abuse or session hijacking in real time

Recommend or autonomously enforce remediation actions (step-up MFA, token revocation, session termination)

Continuously learn from telemetry and endpoint signals

Architect secure telemetry pipelines to support AI-based identity intelligence while maintaining privacy and compliance.

Own the end-to-end lifecycle of SSO services including deployment, reliability, monitoring, observability, and operational excellence.

Establish best practices around secure token handling, key management, certificate rotation, signing/encryption strategies, and secure communications.

Mentor engineers and influence architecture decisions to ensure secure-by-design identity implementations across teams.

What You’ll bring

10+ years of experience designing, building, and operating highly scalable, distributed authentication or identity platforms.

Deep hands-on expertise in Java, Go, or Python, with strong backend system design fundamentals.

Proven experience implementing and scaling SSO and federation technologies, including:

OAuth 2.0

OpenID Connect (OIDC)

SAML 2.0

SCIM

LDAP / Active Directory

Strong understanding of authentication flows (Authorization Code + PKCE, Client Credentials, Device Code, Token Exchange).

Experience implementing and securing:JWT and opaque tokens

Token introspection and revocation

Secure session management

Hands-on experience with MFA, adaptive authentication, risk-based authentication, and password less authentication (FIDO2/WebAuth).

Experience working with Identity Providers (e.g., Azure AD, Okta, Ping, custom IdPs).

Strong understanding of identity threat detection and response, including session risk, credential abuse detection, and policy enforcement.

Exposure to AI/ML-driven security systems, such as:Behavioral analytics

Risk scoring models

Anomaly detection systems

Automated response orchestration

Interest or experience in building Agentic AI systems capable of:Autonomous policy evaluation and enforcement

Security signal aggregation and contextual reasoning

…