Principal Software Engineer
Saviynt
Principal Software Engineer
Saviynt
Cloud identity security and access governance
This is a Principal position within the Platform Engineering organization. Our core mission is to build the foundational, core common layer across Saviynt engineering, consolidating and centralizing scattered platform tools, workflows, and infrastructure primitives. Wearing a dedicated Platform Engineering hat, this role will proactively find opportunities to eliminate operational friction and standardize capabilities into a seamless, unified developer experience.
A primary focus of this role is designing, developing, implementing, rolling out, and supporting our Internal Developer Platform (IDP), fitting all foundational tooling into a cohesive, self-service ecosystem. You will build and implement "golden paths" for developers, creating self-serve platforms embedded with essential security and operational guardrails. Crucially, you will act as a partner across engineering—working closely with developers, Embedded SREs (E-SREs), and Central SRE teams—while actively evangelizing platform products to accelerate adoption throughout the organization.
12+ Years of experience across the Software Development lifecycle with a focus on platform engineering, DevOps, and cloud-native infrastructure.
Proven IDP build experience: you have shipped or significantly contributed to a Backstage or Port portal (or equivalent) used in production.
Deep Kubernetes expertise across EKS and AKS, including multi-tenant cluster design, Helm, Kustomize, and Crossplane.
Experience with multi-tenant SaaS fleet management, cell-based architectures, and ring/canary deployment strategies.
Strong proficiency in Go (Golang) or Python for building production-grade CLIs, custom operators, or platform backends.
GitLab CI + ArgoCD / Argo Rollouts pipeline implementation experience—building CI/CD-as-a-service for engineering teams.
Terraform / OpenTofu module authoring at scale—module registry design, state management, and refactoring large IaC codebases.
Background in developing Backstage plugins or contributing to open-source developer platform ecosystems.
Practical application of workload identity, SPIFFE/IRSA, and cloud-native zero-trust network architectures.
Implementation of OPA/Gatekeeper/Kyverno for policy-as-code within production-grade Kubernetes clusters.
Proficiency in FinOps methodologies and tools such as Kubecost or cloud cost exposure APIs.
Experience managing Kafka or AWS MSK as a multi-tenant platform capability.
Proven platform-first mindset with a history of centralizing scattered tooling into core foundation layers, evangelizing platform adoption, and collaborating effectively across developers, Embedded SREs, and Central SREs.
Professional exposure to identity security frameworks, SaaS delivery, and high-compliance operational environments (SOC 2, ISO 27001, FedRAMP).
Security & Compliance
This role requires adherence to Saviynt’s information security and privacy policies and procedures, including annual security training.
Saviynt is an equal opportunity employer and we welcome everyone to our team. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or veteran status.
Saviynt provides a cloud-based identity security and access governance platform that helps organizations manage digital identities for employees, vendors, and machines. It offers identity governance and administration, third-party access governance, and cloud privileged access management, using automated workflows and identity analytics to reduce risks and maintain audit readiness. The product helps enterprises implement governance from the start, minimize separation-of-duty risks across apps, and stay compliant while lowering costs through a subscription model and scalable deployment across diverse industries.
Explore more opportunities at Saviynt