Staff Software Engineer, Device Security

<p><strong>WHAT IS BOX?</strong> </p> <p>Box is the world’s leader in Intelligent Content Management. We are trusted by more than 115K organizations around the world today, including nearly 70% of the Fortune 500 and leaders across deeply regulated industries (such as AstraZeneca, JLL, and Nationwide), to protect their data, fuel collaboration, and power critical workflows with secure, enterprise AI.</p> <p>By joining Box, you will have the unique opportunity to continue driving our platform forward. Content powers how we work. It’s the billions of files and information flowing across teams, departments, and key business processes every single day: contracts, invoices, employee records, financials, product specs, marketing assets, and more. Our mission is to bring intelligence to the world of content management and empower our customers to completely transform workflows across their organizations. With the combination of AI and enterprise content, the opportunity has never been greater to transform how the world works together and at Box you will be on the front lines of this massive shift.</p> <p>Founded in 2005, Box is headquartered in Redwood City, CA, and we have offices across the United States, Europe, and Asia.<br/><br/></p> <p><strong>Why Box Needs You</strong></p> <p>We’re looking for a <strong>Staff Software Engineer</strong> to join the <strong>Device Security</strong> team. This team is responsible for some of the most critical systems at Box—ensuring only trusted devices can access our Intelligent Content Management platform. As businesses demand increasingly sophisticated controls over user access, this team’s work is central to Box’s security and compliance posture. In this role, you'll drive key initiatives in the secure access space, partnering closely with product, security, and infrastructure teams. We’re looking for a technically strong engineer who thrives on platform-level thinking, has experience working with <strong>large-scale systems</strong>, and is motivated by the challenges of building highly available, secure services for enterprise customers.</p> <p>You’ll join a team of talented engineers and have significant influence in shaping our systems for the future. We’re seeking someone who brings discipline, depth, and a thoughtful approach to engineering in a mission-critical environment.</p> <p> </p> <p><strong>What You’ll Do</strong></p> <ul> <li>Design, build, and maintain mission-critical enterprise software that enforces trusted access to Box from client devices and platforms like Web, Mobile and Desktop.</li> <li>Lead the development of software components in the authentication and secure access domain, ensuring they are resilient, performant, and secure.</li> <li>Build and own key services end-to-end—from architecture and design to implementation and deployment. Ensure high system availability and performance through observability, alerting and on-call support.</li> <li>Drive architectural discussions and help guide the evolution of Box’s security infrastructure.</li> <li>Mentor and coach other engineers on the team.</li> <li>Collaborate closely with other engineers, product managers and security teams to define and deliver robust secure device management and access control capabilities over multiple-quarter long initiatives.</li> </ul> <p><strong>Who You Are</strong></p> <ul> <li>You have <strong>8+ years</strong> of experience in backend development, including leading significant technical initiatives.</li> <li>You’ve worked on <strong>mission-critical systems</strong>, ideally in areas like <strong>identity, authentication, OAuth, or access control</strong>.</li> <li>You write clean, maintainable code in <strong>Java, TypeScript, PHP or similar languages</strong>, and have strong experience with <strong>Spring Boot, or Node.js</strong>.</li> <li>You think in terms of <strong>platforms</strong>, not just features—you build with extensibility and maintainability in mind.</li> <li>You have experience operating large-scale distributed systems with high uptime and security expectations.</li> <li>You’re comfortable mentoring engineers and collaborating across cross-functional teams.</li> <li>You thrive in a well-structured environment and enjoy building scalable solutions in established, mature systems</li> </ul> <p><strong>Preferred Experience</strong></p> <ul> <li>Experience in enterprise security or authentication domains.</li> <li>Familiarity with <strong>zero trust</strong> models and <strong>device posture</strong> management.</li> <li>Experience with cloud platforms like <strong>GCP</strong>, <strong>AWS</strong>, or <strong>Azure</strong>.</li> <li>Prior experience working on internal platforms or systems that require high reliability and compliance</li> </ul> <p> </p> <p><strong>Methodology</strong></p> <ul> <li>Agile management - Scrum</li> <li>Issue tracking tool - Jira</li> <li>Knowledge repository - GitHub Enterprise</li> <li>Code reviews - GitHub Enterprise </li>