Staff Security Engineer

Our Company

At Teradata, we believe that people thrive when empowered with better information. Teradata Autonomous Knowledge Platform activates enterprise intelligence by unifying data, knowledge and business context to achieve tangible outcomes. With Teradata, organizations can provide agents with full context for impact when it matters. Our solution lets businesses connect and scale on premises, in the cloud, or through a hybrid approach. Teradata delivers real business value with AI.

What You’ll Do

As a Staff Software Engineer, you will design, develop, and evolve identity, security, and access management capabilities for Teradata’s cloud platform. You will work on authentication, authorization, identity federation, user provisioning, agent identity, agentic security, and secure integrations across Teradata cloud services.

This role will require you to:

• Design and develop scalable, secure, and highly available cloud services.
• Build identity capabilities using industry standards such as OAuth 2.0, OpenID Connect, SAML, JWT, and SCIM.
• Design secure identity, authorization, and delegation models for AI agents and agentic applications.
• Build and integrate AI agents that securely interact with enterprise services, data, tools, and other agents.
• Address agentic-security concerns such as agent authentication, delegated authorization, least-privilege access, credential management, auditability, and protection against unauthorized actions.
• Design APIs and integrations across distributed services and enterprise identity providers.
• Lead complex technical initiatives across teams and services, from architecture and design through implementation and production deployment.
• Use AI-assisted engineering tools such as GitHub Copilot, Claude Code, and similar tools for software development, testing, documentation, troubleshooting, and design.
• Evaluate new AI development tools and agentic engineering practices, and educate the team on their effective, secure, and responsible use.
• Improve overall team productivity by developing reusable AI-assisted workflows, agents, engineering practices, and automation.
• Ensure the availability, reliability, security, and observability of production services.
• Troubleshoot complex issues across applications, cloud infrastructure, networking, identity providers, AI agents, and databases.
• Participate in design and code reviews and provide technical guidance to other engineers.

Who You’ll Work With

You will join a high-performing engineering team responsible for foundational identity, agent identity, security, and platform capabilities across Teradata’s cloud ecosystem. You will collaborate with engineers, architects, security, SRE, product, AI, and operations teams.

This is an individual contributor role reporting to the Senior Engineering Manager. The role requires hands-on technical leadership, strong ownership, energy, and a passion for driving new identity and agentic-security capabilities forward.

What Makes You a Qualified Candidate

• Bachelor’s or Master’s degree in Computer Science or a related field from a leading institution, or equivalent demonstrated education and professional experience. Graduates from institutions such as IITs, NITs, BITS Pilani, and IIITs are preferred.
• 8+ years of software engineering experience building production-grade backend, platform, security, or distributed systems.
• Strong programming skills in Java, Go, Python, or a comparable modern programming language.
• Experience designing REST APIs, microservices, and distributed systems.
• Experience with cloud-native technologies, including containers, Kubernetes, and public cloud platforms such as AWS, Azure, or GCP.
• Experience designing or developing authentication, authorization, identity, or security-related capabilities for distributed systems.
• Experience with AI-assisted software development using tools such as GitHub Copilot, Claude Code, or comparable coding assistants.
• Experience building or integrating AI agents, agentic applications, or AI-enabled software capabilities.
• Understanding of security considerations for AI agents, including identity, authorization, delegation, credential handling, least-privilege access, auditability, and secure tool invocation.
• Experience with CI/CD, automated testing, observability, and production troubleshooting.
• Strong technical judgment, problem-solving, communication, and ownership skills.
• Experience leading technical designs and complex engineering initiatives across teams as an individual contributor.
• Ability to evaluate new engineering tools and practices, establish reusable patterns, and help other engineers adopt them effectively.

What You’ll Bring

You will be a preferred candidate if you have:

• Experience building or operating Identity and Access Management services.
• Experience with OAuth 2.0, OpenID Connect, SAML, JWT, SCIM, token exchange, and delegated authorization.
• Experience designing identity and authorization models for AI agents, agentic workflows, or multi-agent systems.
• Knowledge of agentic-security risks and controls, including prompt injection, excessive agency, insecure tool use, identity propagation, credential exposure, and auditability.
• Experience integrating with Microsoft Entra ID, Okta, PingFederate, or similar identity providers.
• Experience with role-based or attribute-based access control.
• Knowledge of workload identity, service-to-service authentication, or technologies such as SPIFFE/SPIRE.
• Experience with AI-agent frameworks, model tool-calling, Model Context Protocol, or similar agent integration technologies.
• Experience creating reusable prompts, coding workflows, agents, or automation that improve engineering-team productivity.
• Working knowledge of LDAP, Kerberos, or related enterprise authentication technologies.
• Experience with multi-tenant SaaS or enterprise cloud platforms.
• Knowledge of database authentication, authorization, or user management.

#LI-PG1