[Hiring] Principal Java Engineer II - Security - Elasticsearch @Referral Board

Role Description

This role involves leading the architecture and implementation of Elasticsearch’s core authentication, authorization, and tenant-isolation primitives.

• Take ownership of and drive complex, multi-functional security initiatives from conception to delivery.
• Define technical strategy, roadmaps, and execution for major security architectural components within Elasticsearch.
• Develop foundational security models for intricate features.
• Optimize security performance at massive scale within distributed systems environments.
• Apply cryptographic solutions to address genuine customer use cases.
• Ensure robust data isolation within shared infrastructure supporting disparate customers.
• Drive technical excellence and develop a culture of security awareness and high-performance engineering across the team.
• Act as a principal voice in architectural and design discussions.
• Translate customer needs into a clear, relevant technical vision.
• Monitor and apply industry advancements and best practices in security areas.
• Collaborate with peers across the company to embed security into new customer features from the outset.

Qualifications

• Deep expertise in Java internals, JVM memory management, and writing high-performance, lock-free, and thread-safe code in large OSS codebases.
• Proven experience building scalable AuthZ systems, including RBAC/ABAC models, token validation, permission compilation, and cache invalidation strategies in distributed databases.
• A strong understanding of distributed systems security, including node-to-node trust, secure transport, and partition tolerance.
• Deep knowledge of edge identity protocols (OAuth 2.0, SAML).
• Act as the primary technical point of contact for security features, driving alignment and integration with search, AI, cloud, and operations teams.

Requirements

• Collaborate with engineering and product leadership to define the technical vision and roadmap for authorization and data isolation features.

Benefits

• Competitive pay based on the work you do here and not your previous salary.
• Health coverage for you and your family in many locations.
• Ability to craft your calendar with flexible locations and schedules for many roles.
• Generous number of vacation days each year.
• We match up to $2000 (or local currency equivalent) for financial donations and service.
• Up to 40 hours each year to use toward volunteer projects you love.
• Minimum of 16 weeks of parental leave.