SlipstreamJobs tracks this role from the company's public career site. Apply directly on the employer's site.
Salary: USD 199,100 - 348,400 / annual
Veza, part of ServiceNow's Security & Risk organization, is seeking a Principal Software Engineer to own the end-to-end architecture of its identity security platform. Veza helps customers see who and what has access to what, govern it, and remediate risk across cloud, SaaS, and on-premises systems. The role is critical as the company transitions to address agent security—a new category where static access reviews cannot keep pace with autonomous agents operating at machine speed.
You will own the complete architecture of the Veza platform, including the access graph, ingestion pipeline, authorization and policy engine, and services built on them. Key responsibilities include:
• Lead the evolution toward a graph-native data model (Neo4j or equivalent) that scales to billions of relationships and complex permission hierarchies, setting standards every team builds to.
• Evolve the core graph and storage model for order-of-magnitude growth in customers, entities, and relationships, with a clear migration path from today's system and no customer disruption.
• Define the architecture for non-human identity and AI agent security, making Veza the system of record for what agents can access, with governance, guardrails, and auditability.
• Set the AI architecture for Veza's own agents and features, including agentic patterns, evaluation, observability, cost and capacity planning, and a multi-vendor LLM strategy that avoids lock-in.
• Modernize the integrations framework. Veza has 300+ integrations that drive a disproportionate share of support load. Establish a scalable, testable, self-service framework that raises reliability and cuts onboarding time.
• Architect how Veza fits into ServiceNow, defining the integration model, shared identity and data contracts, and UI surfacing patterns that deliver a unified customer experience without forcing a rewrite.
• Drive deployment flexibility across multi-region SaaS, data residency, regulated-industry requirements (e.g., EU financial regulation such as DORA), and federal-grade deployment.
• Govern architecture across teams through architecture reviews, tech debt management, and clear build-vs-buy decisions.
• Raise the bar on engineering practice, including heavy use of AI coding agents, automated testing coverage, defect escape reduction, and operational excellence with SRE.
• Represent Veza's architecture to executives, customers, partners, and ServiceNow leadership.
• Mentor architects and senior engineers to build the next layer of technical leadership.
Success in the first 12 months includes publishing an org-wide architecture vision and roadmap, launching an integrations modernization plan with measurable improvements, defining a Veza-ServiceNow integration pattern, establishing an architecture review process, and clarifying agent and non-human identity security architecture for product and sales.
REQUIREMENTS:
Core Requirements:
• 15+ years in software engineering, with 5+ years as a staff/principal/chief architect or equivalent, over a large multi-team platform.
• Deep experience designing multi-tenant, cloud-native SaaS at enterprise scale: distributed systems, large-scale data and graph systems, APIs, and microservices.
• Hands-on Kubernetes and cloud experience (AWS required; multi-cloud a plus) and modern DevOps, IaC, and SRE practices.
• Strong background in graph databases and data structures. Hands-on experience with Neo4j or similar graph platforms; understanding of immutable or event-sourced storage models and their operational trade-offs.
• Track record of leading large architectural migrations in a live production system.
• Experience influencing without direct authority across multiple teams and geographies (US, EU, India).
• Executive-level communication, with the ability to write and defend an architecture decision to engineers, customers, and the C-suite.
• Strong proficiency in Python and Go or Java, with the ability to go deep in code and design reviews.
Security and Identity Requirements:
• Strong background in identity and access: IGA, IAM, PAM, authorization models, access reviews, lifecycle management, or adjacent security domains.
• Understanding of non-human identity (service accounts, secrets, API keys, workload identity) and emerging agent identity and authorization models.
• Experience building security products that meet their own security and compliance bar (SOC 2, FedRAMP or equivalent, data residency).
AI Requirements:
• Experience delivering production AI systems: LLMs, agentic architectures, RAG, evaluation, observability, guardrails, human-in-the-loop, and managing model cost and capacity.
• Active use of AI-native development tools (Claude Code, Cursor, Codex, or equivalent) and the ability to drive adoption across teams.
Preferred:
• Experience through an acquisition or platform integration, aligning an acquired architecture with a parent platform.
• Prior experience with integration-heavy platforms (hundreds of connectors) and the reliability challenges they bring.
• Familiarity with graph databases or immutable/event-sourced storage models.
• BS/MS in Computer Science or a related field, or equivalent experience.
