We’re looking for a Staff Software Engineer to join the Device Security team. This team is responsible for some of the most critical systems at Box—ensuring only trusted devices can access our Intelligent Content Management platform. As businesses demand increasingly sophisticated controls over user access, this team’s work is central to Box’s security and compliance posture. In this role, youll drive key initiatives in the secure access space, partnering closely with product, security, and infrastructure teams. We’re looking for a technically strong engineer who thrives on platform-level thinking, has experience working with large-scale systems, and is motivated by the challenges of building highly available, secure services for enterprise customers.
You’ll join a team of talented engineers and have significant influence in shaping our systems for the future. We’re seeking someone who brings discipline, depth, and a thoughtful approach to engineering in a mission-critical environment.
Methodology
Agile management - Scrum
Issue tracking tool - Jira
Knowledge repository - GitHub Enterprise
Code reviews - GitHub Enterprise
Version control system - GIT
**Our compensation structure is the base salary and equity in the form of restricted stock units.
responsibilities :
Design, build, and maintain mission-critical enterprise software that enforces trusted access to Box from client devices and platforms like Web, Mobile and Desktop.
Lead the development of software components in the authentication and secure access domain, ensuring they are resilient, performant, and secure.
Build and own key services end-to-end—from architecture and design to implementation and deployment. Ensure high system availability and performance through observability, alerting and on-call support.
Drive architectural discussions and help guide the evolution of Box’s security infrastructure.
Mentor and coach other engineers on the team.
Collaborate closely with other engineers, product managers and security teams to define and deliver robust secure device management and access control capabilities over multiple-quarter long initiatives.
requirements-expected :
You have 8+ years of experience in backend development, including leading significant technical initiatives.
You’ve worked on mission-critical systems, ideally in areas like identity, authentication, OAuth, or access control.
You write clean, maintainable code in Java, TypeScript, PHP or similar languages, and have strong experience with Spring Boot, or Node.js.
You think in terms of platforms, not just features—you build with extensibility and maintainability in mind.
You have experience operating large-scale distributed systems with high uptime and security expectations.
You’re comfortable mentoring engineers and collaborating across cross-functional teams.
You thrive in a well-structured environment and enjoy building scalable solutions in established, mature systems
