Senior Engineer - Access Entitlements

The role

You will design and scale systems to discover, normalize, and reason about access across customer data estates including on-prem file shares, Active Directory, and SaaS platforms. You will build connectors, pipelines, and graph models to power least-privilege analysis, access certification, and risk detection.

What you will do

• Build and extend connectors to enumerate identities and resource-level permissions across on-prem and SaaS data sources
• Design entitlement pipelines that parallelize across large tenants using batching and checkpointing
• Own the mapping from raw connector output to normalized entitlement records and identity graphs
• Work across a multi-store architecture including Elasticsearch, Databricks/Delta, and Neptune-backed graph
• Build pipelines that join static entitlements against observed activity logs
• Instrument and test for failure modes like partial scans, malformed ACLs, and race conditions

Required qualifications

• 6+ years of professional software engineering experience
• Experience with identity/access systems, security data pipelines, or large-scale distributed data processing
• Strong Go, Java, or Python skills
• Experience writing concurrent/parallel data pipelines
• Experience with graph databases or graph query languages (Gremlin, Cypher, or similar)
• Familiarity with Elasticsearch/OpenSearch
• Familiarity with at least one large-scale analytical store (Databricks, Snowflake, BigQuery, Redshift)
• Understanding of identity and access concepts such as RBAC, ACLs, and group membership

Nice to have

• Experience with Microsoft Graph API, SharePoint REST APIs, or ActiveDirectory/LDAP-based identity systems
• Familiarity with AWS Neptune, TinkerPop/Gremlin, or other graph-native databases at production scale
• Background in DSPM, CIEM, IAM governance, or data security posture tooling
• Experience designing multi-tenant systems with per-tenant data isolation

Benefits

• Paid vacation starting at 15 days per year, increasing to 20 or 25 days based on tenure
• 4 additional global VeeaMe Days annually
• 24 paid volunteer hours annually through Veeam Cares
• Paid parental leave including 3 weeks for all parents and 12 weeks for birthing parents
• Medical, dental, and vision coverage from day one
• Mental health support, therapy sessions, and digital wellness tools
• RRSP retirement plan with matching contributions
• Fertility support
• AirVet: 24/7 virtual veterinary care at no cost
• Opportunities to learn and grow through on-demand libraries, mentoring, workshops, and learning events

About the company

Veeam is the Data and AI Trust Company, specializing in helping organizations ensure their data and AI are fully understood, secured, and resilient. Headquartered in Seattle, Veeam protects over 550,000 customers worldwide.