Software Engineer II

Uber•San Francisco, CA

fulltime

Engineering and Information Technology

3+ years

About the role

About The Role Uber's AI Security team, part of Core Security Engineering, is building the foundational security platforms that enable AI at Uber to operate safely and at scale. As agentic workflows and the Model Context Protocol (MCP) become core to how teams build software, we are redefining identity, access control, and policy enforcement for both humans and AI agents.

This role will have the opportunity to work on securing MCPs, building agent identity and identity propagation, and delivering risk-based, adaptive access control as part of Uber's Zero Trust Architecture. You will help design and build backend systems that determine who or what can access which resources, under what context, and with what level of risk, in real time.

What The Candidate Will Need / Bonus Points ---- What the Candidate Will Do ----

Design and build backend systems that secure MCP servers, AI tools, and agent-initiated actions
Implement agent identity, identity propagation, and just-in-time credential flows across services and platforms
Build and evolve security gateways (e.g., MCP Gateway) providing authentication, authorization, observability, and guardrails
Implement risk-based and adaptive access control, integrating contextual signals (identity, behavior, environment, risk signals) into authorization decisions
Partner with Risk and AuthZ systems to move from static rules and manual approvals to real-time, contextual access decisions
Ensure systems are production-ready through strong reliability practices, monitoring, and operational ownership
Collaborate closely with Dev Platform, Risk, Privacy, ML, and Infrastructure teams to embed security into core AI platforms

Basic Qualifications

3+ years of experience building and operating backend or infrastructure systems in production
Strong proficiency in one or more backend languages (e.g. Go, Python, Java, or similar)
Experience designing and owning APIs, services, or platforms used by other engineers
Solid understanding of distributed systems fundamentals (auth flows, latency, reliability, failure modes)
Ability to translate security, identity, and platform requirements into concrete system designs

Preferred Qualifications

Experience with identity, authentication, authorization, or access control systems
Familiarity with Zero Trust or identity-based security architectures
Experience building risk-aware or policy-driven systems (e.g., contextual authorization, approvals, gating, enforcement)
Experience with security-sensitive infrastructure such as gateways, credential distribution, policy engines, or audit systems
Familiarity with large-scale data or streaming systems (Kafka, Spark, Flink, Pinot, Hive, Cassandra)
Strong cross-functional communication skills

For San Francisco, CA-based roles: The base salary range for this role is USD$171,000 per year - USD$190,000 per year. For Seattle, WA-based roles: The base salary range for this role is USD$171,000 per year - USD$190,000 per year. For all US locations, you will be eligible to participate in Uber's bonus program, and may be offered an equity award & other types of comp. All full-time employees are eligible to participate in a 401(k) plan. You will also be eligible for various benefits. More details can be found at the following link https://jobs.uber.com/en/benefits., For San Francisco, CA-based roles: The base salary range for this role is USD$171,000 per year - USD$190,000 per year. For Seattle, WA-based roles: The base salary range for this role is USD$171,000 per year - USD$190,000 per year. For all US locations, you will be eligible to participate in Uber's bonus program, and may be offered an equity award & other types of comp. All full-time employees are eligible to participate in a 401(k) plan. You will also be eligible for various benefits. More details can be found at the following link https://jobs.uber.com/en/benefits.

Similar Opportunities

About Uber

Visit Website