Software Engineer II

About The Role

Uber's AI Security team, part of Core Security Engineering, is building the foundational security platforms that enable AI at Uber to operate safely and at scale. As agentic workflows and the Model Context Protocol (MCP) become core to how teams build software, we are redefining identity, access control, and policy enforcement for both humans and AI agents.

This role will have the opportunity to work on securing MCPs, building agent identity and identity propagation, and delivering risk-based, adaptive access control as part of Uber's Zero Trust Architecture. You will help design and build backend systems that determine who or what can access which resources, under what context, and with what level of risk, in real time.

What The Candidate Will Need / Bonus Points

---- What the Candidate Will Do ----

• Design and build backend systems that secure MCP servers, AI tools, and agent-initiated actions
• Implement agent identity, identity propagation, and just-in-time credential flows across services and platforms
• Build and evolve security gateways (e.g., MCP Gateway) providing authentication, authorization, observability, and guardrails
• Implement risk-based and adaptive access control, integrating contextual signals (identity, behavior, environment, risk signals) into authorization decisions
• Partner with Risk and AuthZ systems to move from static rules and manual approvals to real-time, contextual access decisions
• Ensure systems are production-ready through strong reliability practices, monitoring, and operational ownership
• Collaborate closely with Dev Platform, Risk, Privacy, ML, and Infrastructure teams to embed security into core AI platforms
  
  

Basic Qualifications

• 3+ years of experience building and operating backend or infrastructure systems in production
• Strong proficiency in one or more backend languages (e.g. Go, Python, Java, or similar)
• Experience designing and owning APIs, services, or platforms used by other engineers
• Solid understanding of distributed systems fundamentals (auth flows, latency, reliability, failure modes)
• Ability to translate security, identity, and platform requirements into concrete system designs
  
  

Preferred Qualifications

• Experience with identity, authentication, authorization, or access control systems
• Familiarity with Zero Trust or identity-based security architectures
• Experience building risk-aware or policy-driven systems (e.g., contextual authorization, approvals, gating, enforcement)
• Experience with security-sensitive infrastructure such as gateways, credential distribution, policy engines, or audit systems
• Familiarity with large-scale data or streaming systems (Kafka, Spark, Flink, Pinot, Hive, Cassandra)
• Strong cross-functional communication skills
  
  

For San Francisco, CA-based roles: The base salary range for this role is USD$171,000 per year - USD$190,000 per year. For Seattle, WA-based roles: The base salary range for this role is USD$171,000 per year - USD$190,000 per year. For all US locations, you will be eligible to participate in Uber's bonus program, and may be offered an equity award & other types of comp. All full-time employees are eligible to participate in a 401(k) plan. You will also be eligible for various benefits. More details can be found at the following link https://jobs.uber.com/en/benefits., For San Francisco, CA-based roles: The base salary range for this role is USD$171,000 per year - USD$190,000 per year. For Seattle, WA-based roles: The base salary range for this role is USD$171,000 per year - USD$190,000 per year. For all US locations, you will be eligible to participate in Uber's bonus program, and may be offered an equity award & other types of comp. All full-time employees are eligible to participate in a 401(k) plan. You will also be eligible for various benefits. More details can be found at the following link https://jobs.uber.com/en/benefits.