SOFTWARE ENGINEER, INFORMATION SECURITY

As a Staff Engineer at Walmart, you will play a crucial role in leading the architecture and engineering of Walmarts enterprise Single Sign-On (SSO) platform within the Identity and Access Management (IAM) team. Your responsibilities will include: - Leading the design and development of scalable SSO and federation platforms in collaboration with IAM, application, platform, and security engineering teams. - Architecting and implementing authentication and identity solutions using standards such as OAuth 2.0, OpenID Connect (OIDC), SAML 2.0, SCIM, and LDAP/AD. - Designing and building high-performance authentication services using Java, Go, Python, and modern frontend technologies, integrating with REST APIs and identity stores. - Developing and enhancing identity lifecycle flows including login, MFA, adaptive authentication, token issuance/validation, session management, and secure logout. - Driving modernization initiatives such as Zero Trust authentication, passwordless authentication (FIDO2/WebAuth), and device trust integration. - Designing and implementing AI-driven adaptive authentication mechanisms that leverage behavioral signals, contextual risk scoring, and anomaly detection. - Architecting secure telemetry pipelines to support AI-based identity intelligence while maintaining privacy and compliance. - Owning the end-to-end lifecycle of SSO services including deployment, reliability, monitoring, observability, and operational excellence. - Establishing best practices around secure token handling, key management, certificate rotation, signing/encryption strategies, and secure communications. - Mentoring engineers and influencing architecture decisions to ensure secure-by-design identity implementations across teams. Qualifications required for this role: - 10+ years of experience designing, building, and operating highly scalable, distributed authentication or identity platforms. - Deep hands-on expertise in Java, Go, or Python, with strong backend system design fundamentals. - Proven experience implementing and scaling SSO and federation technologies including OAuth 2.0, OIDC, SAML 2.0, SCIM, and LDAP/AD. - Strong understanding of authentication flows and experience implementing and securing JWT and opaque tokens, token introspection and revocation, secure session management, etc. - Hands-on experience with MFA, adaptive authentication, risk-based authentication, passwordless authentication (FIDO2/WebAuth). - Experience working with Identity Providers such as Azure AD, Okta, Ping, and custom IdPs. - Strong knowledge of cryptography fundamentals, PKI, key lifecycle management, and secure token signing. - Experience building cloud-native identity systems in Azure or GCP using Docker and Kubernetes. - Strong Linux fundamentals and troubleshooting skills. - Proven ability to influence cross-functional teams and drive enterprise-wide IAM standards. - Excellent communication skills to translate complex authentication, AI, and risk concepts into clear business and engineering guidance. Join Walmart Global Tech, where innovation and technology empower our people to make a significant impact. Grow your career, gain new skills, and help reimagine the future of retail with us. As a Staff Engineer at Walmart, you will play a crucial role in leading the architecture and engineering of Walmarts enterprise Single Sign-On (SSO) platform within the Identity and Access Management (IAM) team. Your responsibilities will include: - Leading the design and development of scalable SSO and federation platforms in collaboration with IAM, application, platform, and security engineering teams. - Architecting and implementing authentication and identity solutions using standards such as OAuth 2.0, OpenID Connect (OIDC), SAML 2.0, SCIM, and LDAP/AD. - Designing and building high-performance authentication services using Java, Go, Python, and modern frontend technologies, integrating with REST APIs and identity stores. - Developing and enhancing identity lifecycle flows including login, MFA, adaptive authentication, token issuance/validation, session management, and secure logout. - Driving modernization initiatives such as Zero Trust authentication, passwordless authentication (FIDO2/WebAuth), and device trust integration. - Designing and implementing AI-driven adaptive authentication mechanisms that leverage behavioral signals, contextual risk scoring, and anomaly detection. - Architecting secure telemetry pipelines to support AI-based identity intelligence while maintaining privacy and compliance. - Owning the end-to-end lifecycle of SSO services including deployment, reliability, monitoring, observability, and operational excellence. - Establishing best practices around secure token handling, key management, certificate rotation, signing/encryption strategies, and secure communications. - Mentoring engineers and influencing architecture decisions to ensure secure-by-design identity implementations across teams. Qualif