← All roles

Principal Software Developer - Security - Elasticsearch

Elastic· Platform - Elasticsearch
Apply on company site
RemoteCA$154k - CA$243.6kfull-timePosted 2mo ago

About the role

Principal software development role focusing on architecture, design, and delivery of core Elasticsearch security features including authentication, authorization, and tenant isolation, with emphasis on high-performance security at scale in distributed systems.

Responsibilities

  • Owning core security initiatives from architecture to production, focusing on the delivery of new critical features. Leading the technical design, plan, and execution for major security components inside the Elasticsearch core engine.
  • Developing the foundational security models for intricate features.
  • Optimizing security performance at scale in distributed systems environments.
  • Applying cryptographic solutions to address genuine customer use cases.
  • Ensuring robust data isolation within shared infrastructure supporting disparate customers.
  • Monitoring and applying the latest advancements and best practices in security. This includes authentication, identity management, cryptography, and data access management.
  • Collaborating with peers across the company to embed security into new customer features from the outset.
  • Drive vulnerability management efforts by collaborating closely with the InfoSec team to proactively identify, assess, and remediate security risks.
  • Leverage AI-driven tools to automate vulnerability triage, prioritization, and preliminary investigation, streamlining security workflows and reducing manual intervention.
  • Mentoring and coaching other engineers, fostering a culture of technical excellence and security-first development.

Qualifications

  • Deep knowledge of Java internals and JVM memory management.
  • Understanding of concurrency models; ability to write high-performance, thread-safe, lock-free code.
  • Experience in designing and building scalable authorization systems (RBAC/ABAC), token validation pipelines, permission compilation, and distributed cache invalidation.
  • Solid understanding of distributed systems security (node-to-node mutual trust, zero-trust transport, partition tolerance, cluster state propagation).
  • Deep knowledge of edge identity protocols (OAuth 2.0, SAML).
  • Proven track record of using AI to accelerate development, debugging, and optimization while owning outcomes.
  • Ability to collaborate across functions and teams and transition between projects/teams based on priorities.
  • Ability to work autonomously, drive decisions, and lead a distributed team with asynchronous, direct, and transparent communication.

Skills

Required:Java internals and JVM memory managementDistributed authorization design (RBAC/ABAC)Distributed systems securityOAuth 2.0 and SAML
Nice to have:AI in development

Benefits

  • Stock program eligibility
  • Company-matched Registered Retirement Savings Plan (RRSP) with dollar-for-dollar matching up to 6%
  • Health coverage for you and your family in many locations
  • Flexible locations and schedules for many roles
  • Generous vacation days
  • Donations matching up to $2000 (or local currency equivalent) per year
  • Up to 40 hours per year volunteering leave
  • Parental leave minimum 16 weeks
Last updated Sep 3, 2026. Interested? Apply on the company site.
Elastic logo

About Elastic

The open source platform that powers search, observability, security, and more ...

Power insights and outcomes with The Elastic Search AI Platform. See into your data and find answers that matter with enterprise solutions designed to help you accelerate time to insight.

searchobservabilitysecurityAIenterprise solutionsvector database
Company profileWebsite

More open roles at Elastic