Principal Software Engineer - Veza

What you'll do

Identity

• Own the identity model for workloads and agents: SPIFFE/SPIRE trust domains, workload attestation, and how identities are issued, scoped, rotated, and revoked.
• Architect ephemeral authentication and authorization end to end: short-lived credential issuance, token exchange and delegation (for example RFC 8693-style flows), and revocation that takes effect in practice.
• Define runtime authorization for agents: what an agent can access, under whose delegated authority, with what guardrails, and with audit trails that hold up to review.
• Lead the identity architecture for the Agent Security roadmap, including Runtime Authorization, the Access Policy Engine, and AgentID with short-lived credentials, and its integration with the NHI program.
• Set the identity standards for non-human identities across Veza’s integrations, covering how connectors authenticate, get scoped, and rotate secrets.
Core architecture

• Define identity contracts that the graph, data model, and integrations architects build against, and review designs in those areas for identity correctness.
• Shape how identity fits into the Veza-ServiceNow integration model, including shared identity and data contracts and UI surfacing patterns.
• Partner with the integrations, graph, and deployment owners on decisions that touch identity, without taking over their domains.
Leadership

• Represent Veza’s identity architecture to customers, partners, ServiceNow Security leadership, and standards bodies.
• Mentor engineers

Department: Engineering, Infrastructure and Operations
Function: Engineering
Experience Level: Not Applicable