(USA) Principal, Software Engineer, Information Security

Position Summary...

We are seeking a Principal Software Engineer to own, architect, and deliver scalable and secure enterprise authentication solutions. This role is part of the Multi-Factor Authentication (MFA) team within the Identity and Access Management (IAM) organization and is focused on Phishing-Resistant MFA (PR-MFA) using FIDO2, passkeys, hardware authenticators, and certificate-based authentication (CBA). You will define MFA architecture and build software and automation enabling secure registration, lifecycle management, recovery, and rollout at scale, partnering across security, endpoint, and associate experience teams.

What you'll do...

As the Principal Software Engineer, Cybersecurity (IAM – MFA), you will bring:
·        Strong software engineering experience building enterprise-grade, high-scale services and APIs
·        Deep understanding of authentication and MFA fundamentals, assurance levels (AAL2/AAL3), and context-aware and risk-based MFA patterns
·        Strong knowledge of MFA threats (phishing, MFA fatigue, relay attacks, recovery abuse)
·        Hands-on experience implementing PR-MFA using:
o   FIDO2 security keys and passkeys
o   Certificate-based authentication (CBA) using PIV / Smart Cards and X.509 certificates
·        Deep experience across Windows, macOS, iOS, and Android platforms (including Windows Hello for Business and platform authenticators)
·        Proven ability to design MFA for large, diverse enterprise user populations
·        Ability to evaluate security, usability, and operational tradeoffs
·    ��   Strong awareness of industry standards and trends (FIDO Alliance, PIV, NIST 800-63, Zero Trust, PKI-based authentication)
  What You Will Do – Responsibilities
·        Own the enterprise MFA architecture, including PR-MFA and certificate-based authentication
·        Design and operate services supporting registration, lifecycle, recovery, and break-glass
·        Define PR-MFA rollout patterns that drive adoption with strong assurance
·        Integrate MFA across IdP, SSO, VPN, Windows, macOS, iOS, and Android
·        Apply FIDO2/passkey concepts (WebAuthn, CTAP, attestation) and CBA concepts (PKI, certificate lifecycle, trust chains)
·        Lead hardware authenticator (YubiKey) programs, including enrollment and recovery
·        Define and track adoption and friction metrics
·        Serve as a technical authority and mentor senior engineers
Qualifications
Bachelor’s degree in a related field and 10+ years experience in software engineering and/or cybersecurity with deep IAM focus


At Walmart, we offer competitive pay as well as performance-based bonus awards and other great benefits for a happier mind, body, and wallet. Health benefits include medical, vision and dental coverage. Financial benefits include 401(k), stock purchase and company-paid life insurance. Paid time off benefits include PTO (including sick leave), parental leave, family care leave, bereavement, jury duty, and voting. Other benefits include short-term and long-term disability, company discounts, Military Leave Pay, adoption and surrogacy expense reimbursement, and more. You will also receive PTO and/or PPTO that can be used for vacation, sick leave, holidays, or other purposes. The amount you receive depends on your job classification and length of employment. It will meet or exceed the requirements of paid sick leave laws, where applicable. For information about PTO, see

Apply for this role

Generate a tailored application kit with a matched cover letter, interview prep, and CV highlights — in under 60 seconds.

Apply Now →Generate Application Kit

Free account required — sign up in 30s

Report an issue

Company

Walmart

View company profile →