(USA) Staff, Software Engineer, Information Security, Non-Human Identity / Agentic Identity
Walmart
Software Engineering, IT
United States · Herndon, VA, USA · Fairfax, VA, USA · Bentonville, AR, USA · London, UK · Remote
Posted on Mar 13, 2026
Position Summary...
We are seeking a Staff Software Engineer, Information Security to design, build, and scale identity, authentication, and authorization capabilities for agentic AI ecosystems. This role is focused on Non-Human Identity (NHI), including an AI identity control plane, identity governance, continuous authentication, risk-based access control, and adaptive authorization at global scale.You will lead the delivery of key platform capabilities, partner across engineering and security teams, and raise the bar on secure architecture and engineering excellence for AI identities and agent actions.What you'll do...
- 8+ years of software engineering experience building and operating enterprise-scale systems.
- 3+ years of experience in identity, authentication, and authorization at enterprise scale.
- Strong understanding of agentic AI architectures and NHI lifecycle management (provisioning, attestation, rotation, decommissioning).
- Experience designing and implementing continuous authentication and runtime trust evaluation patterns.
- Hands-on experience with adaptive authorization, policy-as-code, and modern authorization systems.
- Strong knowledge of cloud-native identity, workload identity, service-to-service auth, and API security.
- Experience building and operating distributed services with high reliability and strong security posture.
- Automation skills (e.g., Python, PowerShell) and infrastructure/CI security fundamentals.
- Strong system design, technical leadership, and cross-team communication skills.
- Lead the design and implementation of NHI platform services supporting agent identity, authentication, and authorization.
- Deliver secure patterns for delegated authority, least privilege, and adaptive authorization for agentic workflows.
- Implement continuous authentication and risk-based access control to evaluate trust at runtime.
- Build automation for agent identity lifecycle, credential issuance/rotation, and governance controls.
- Define and implement observability, auditing, and compliance controls for agent actions (telemetry, attribution, lineage).
- Drive engineering best practices: secure coding, threat modeling, design reviews, and operational readiness.
- Mentor engineers, contribute to technical planning, and influence standards across teams.
- Partner with platform, product, and security teams to deliver secure AI capabilities end-to-end.
- Experience with Azure, AWS, or GCP identity platforms and their workload identity primitives.
- Experience with Kubernetes workload identity, service mesh, or distributed policy enforcement.
- Experience building security-critical platforms in regulated industries (e.g., finance, healthcare, retail).
Eligibility requirements apply to some benefits and may depend on your job classification and length of employment. Benefits are subject to change and may be subject to a specific plan or program terms.
For information about benefits and eligibility, see One.Walmart.
Bentonville, Arkansas US-10866: The annual salary range for this position is $110,000.00 - $220,000.00
Herndon, Virginia US-10710: The annual salary range for this position is $132,000.00 - $264,000.00 Additional compensation includes annual or quarterly performance bonuses. Additional compensation for certain positions may also include :
- Stock
ㅤ
ㅤ
ㅤ
ㅤ
Minimum Qualifications...
Outlined below are the required minimum qualifications for this position. If none are listed, there are no minimum qualifications.
Option 1: Bachelor's degree in computer science, information technology, engineering, information systems, cybersecurity, or related area and 4years’ experience in software engineering or related area at a technology, retail, or data-driven company.Option 2: 6 years’ experience in software engineering or related area at a technology, retail, or data-driven company.
Preferred Qualifications...
Outlined below are the optional preferred qualifications for this position. If none are listed, there are no preferred qualifications.
Certification in Security+, GISF, CISSP, CCSP, or GSEC, Master’s degree in computer science, information technology, engineering, information systems, cybersecurity or related area and 2 years’ experience leading information security or cybersecurity projects, We value candidates with a background in creating inclusive digital experiences, demonstrating knowledge in implementing Web Content Accessibility Guidelines (WCAG) 2.2 AA standards, assistive technologies, and integrating digital accessibility seamlessly. The ideal candidate would have knowledge of accessibility best practices and join us as we continue to create accessible products and services following Walmart’s accessibility standards and guidelines for supporting an inclusive culture.