(USA) Principal, Software Engineer, Information Security

Walmart • Bentonville, AR

1d • $110,000 - $220,000

About The Position

We are seeking a Principal Software Engineer to own, architect, and deliver scalable and secure enterprise authentication solutions. This role is part of the Multi-Factor Authentication (MFA) team within the Identity and Access Management (IAM) organization and is focused on Phishing-Resistant MFA (PR-MFA) using FIDO2, passkeys, hardware authenticators, and certificate-based authentication (CBA). You will define MFA architecture and build software and automation enabling secure registration, lifecycle management, recovery, and rollout at scale, partnering across security, endpoint, and associate experience teams. What you'll do... As the Principal Software Engineer, Cybersecurity (IAM – MFA), you will bring: · Strong software engineering experience building enterprise-grade, high-scale services and APIs · Deep understanding of authentication and MFA fundamentals, assurance levels (AAL2/AAL3), and context-aware and risk-based MFA patterns · Strong knowledge of MFA threats (phishing, MFA fatigue, relay attacks, recovery abuse) · Hands-on experience implementing PR-MFA using: o FIDO2 security keys and passkeys o Certificate-based authentication (CBA) using PIV / Smart Cards and X.509 certificates · Deep experience across Windows, macOS, iOS, and Android platforms (including Windows Hello for Business and platform authenticators) · Proven ability to design MFA for large, diverse enterprise user populations · Ability to evaluate security, usability, and operational tradeoffs · Strong awareness of industry standards and trends (FIDO Alliance, PIV, NIST 800-63, Zero Trust, PKI-based authentication)

Requirements

• Strong software engineering experience building enterprise-grade, high-scale services and APIs
• Deep understanding of authentication and MFA fundamentals, assurance levels (AAL2/AAL3), and context-aware and risk-based MFA patterns
• Strong knowledge of MFA threats (phishing, MFA fatigue, relay attacks, recovery abuse)
• Hands-on experience implementing PR-MFA using: o FIDO2 security keys and passkeys o Certificate-based authentication (CBA) using PIV / Smart Cards and X.509 certificates
• Deep experience across Windows, macOS, iOS, and Android platforms (including Windows Hello for Business and platform authenticators)
• Proven ability to design MFA for large, diverse enterprise user populations
• Ability to evaluate security, usability, and operational tradeoffs
• Strong awareness of industry standards and trends (FIDO Alliance, PIV, NIST 800-63, Zero Trust, PKI-based authentication)
• Bachelor’s degree in a related field and 10+ years experience in software engineering and/or cybersecurity with deep IAM focus
• Option 1: Bachelor's degree in computer science, information technology, engineering, information systems, cybersecurity, or related area and 5years’ experience in software engineering or related area at a technology, retail, or data-driven company.
• Option 2: 7 years’ experience in software engineering or related area at a technology, retail, or data-driven company.

Nice To Haves

• Certification in Security+, GISF, CISSP, CCSP, or GSEC
• Master’s degree in computer science, information technology, engineering, information systems, cybersecurity or related area and 3 years’ experience leading information security or cybersecurity projects
• We value candidates with a background in creating inclusive digital experiences, demonstrating knowledge in implementing Web Content Accessibility Guidelines (WCAG) 2.2 AA standards, assistive technologies, and integrating digital accessibility seamlessly.
• The ideal candidate would have knowledge of accessibility best practices and join us as we continue to create accessible products and services following Walmart’s accessibility standards and guidelines for supporting an inclusive culture.

Responsibilities

• Own the enterprise MFA architecture, including PR-MFA and certificate-based authentication
• Design and operate services supporting registration, lifecycle, recovery, and break-glass
• Define PR-MFA rollout patterns that drive adoption with strong assurance
• Integrate MFA across IdP, SSO, VPN, Windows, macOS, iOS, and Android
• Apply FIDO2/passkey concepts (WebAuthn, CTAP, attestation) and CBA concepts (PKI, certificate lifecycle, trust chains)
• Lead hardware authenticator (YubiKey) programs, including enrollment and recovery
• Define and track adoption and friction metrics
• Serve as a technical authority and mentor senior engineers

Benefits

• At Walmart, we offer competitive pay as well as performance-based bonus awards and other great benefits for a happier mind, body, and wallet.
• Health benefits include medical, vision and dental coverage.
• Financial benefits include 401(k), stock purchase and company-paid life insurance.
• Paid time off benefits include PTO (including sick leave), parental leave, family care leave, bereavement, jury duty, and voting.
• Other benefits include short-term and long-term disability, company discounts, Military Leave Pay, adoption and surrogacy expense reimbursement, and more.
• You will also receive PTO and/or PPTO that can be used for vacation, sick leave, holidays, or other purposes. The amount you receive depends on your job classification and length of employment. It will meet or exceed the requirements of paid sick leave laws, where applicable.
• For information about PTO, see https://one.walmart.com/notices.
• Live Better U is a Walmart-paid education benefit program for full-time and part-time associates in Walmart and Sam's Club facilities. Programs range from high school completion to bachelor's degrees, including English Language Learning and short-form certificates. Tuition, books, and fees are completely paid for by Walmart.
• Eligibility requirements apply to some benefits and may depend on your job classification and length of employment. Benefits are subject to change and may be subject to a specific plan or program terms. For information about benefits and eligibility, see One.Walmart.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level