Opportunity at
ElasticPrincipal Software Developer - Security - Elasticsearch
This full-time Principal Software Developer role works on the Elasticsearch Security team. The posting does not state a location, and the listing marks the role as…
Career Tools
About This Role
This full-time Principal Software Developer role works on the Elasticsearch Security team. The posting does not state a location, and the listing marks the role as on-site. The job leads the design of Elasticsearch's primary security features, including authentication, authorisation and tenant isolation, with the aim of high-performance security at every level. The developer owns security initiatives from architecture through to production, leads technical planning for major security components in…
Job Description
This full-time Principal Software Developer role works on the Elasticsearch Security team. The posting does not state a location, and the listing marks the role as on-site. The job leads the design of Elasticsearch's primary security features, including authentication, authorisation and tenant isolation, with the aim of high-performance security at every level.
The developer owns security initiatives from architecture through to production, leads technical planning for major security components in the core engine and builds the security models that complex features need. Other work covers throughput under heavy load in distributed clusters, applying cryptography to genuine customer needs, and keeping data isolated across customers who share infrastructure. The role works with InfoSec on vulnerability management and uses AI tools to help triage and investigate risks.
The developer also mentors engineers and builds a culture focused on technical quality and security-first development, working with engineering and product leaders across the company.
The posting asks for a thorough grasp of the JVM and how it manages memory, a solid grasp of concurrency and experience writing high-performance, thread-safe code. Experience designing scalable RBAC and ABAC authorisation systems, token validation and distributed cache invalidation is needed, as is understanding of node-to-node trust, zero-trust transport and OAuth 2.0 and SAML. Pay is base salary only, with no variable component. The posting lists a typical starting range of $154,000 to $243,600 CAD, with eligibility for Elastic's stock program and a Registered Retirement Savings Plan that the company matches.
Responsibilities
- Own security projects from architecture through to production delivery
- Lead technical design, planning and delivery of major security components in the core engine
- Build foundational security models for complex features
- Improve security throughput under heavy load in distributed clusters
- Apply cryptographic methods to genuine customer use cases
- Keep data isolated for customers who share infrastructure
- Work with InfoSec on finding, assessing and fixing security risks, using AI tools for triage
- Mentor engineers and promote security-first development
Requirements
- A thorough grasp of the JVM and how it manages memory
- Understanding of concurrency models and ability to write thread-safe, high-performance code
- Experience with large open-source or enterprise codebases
- Experience designing scalable RBAC and ABAC authorisation systems
- Knowledge of token validation pipelines, permission pre-compilation and cache invalidation across nodes
- Understanding of distributed security, including node-to-node trust, zero-trust transport and partition tolerance
- Knowledge of OAuth 2.0 and SAML
- Demonstrated use of AI to speed up development while owning final outcomes
Qualifications
- Familiarity with cipher suites, TLS handshakes and certificate lifecycle work in PKI environments
- Familiarity with post-quantum cryptography and migration of services to quantum-resistant algorithms
- Hands-on experience mapping engine controls to FedRAMP, FIPS 140 and SOC 2
- Hands-on time inside the core code of a database or search product
Core Skills
Benefits
- Eligibility for Elastic's stock program
- Registered Retirement Savings Plan the company matches dollar for dollar on eligible earnings, up to 6 percent
- Competitive pay set by the work performed, not by previous salary
- Health coverage for employees and their families in many locations
- Scheduling and location flexibility for many roles
- Generous annual vacation allowance
- Company match of up to $2,000 (or local equivalent) for donations and service
- Up to 40 hours a year available for volunteer work
- At least 16 weeks of parental leave
Frequently Asked Questions
Answers are based only on the employer’s listing; where it doesn’t say, neither do we.
Where is this role based?
The posting does not specify a location. The listing marks the role as on-site.
What is the salary range?
The posting lists a typical starting base salary range of $154,000 to $243,600 CAD, with no variable pay component.
What core skills does the role need?
Deep Java internals knowledge, concurrency expertise and experience designing scalable authorisation systems are needed, along with knowledge of OAuth 2.0 and SAML.
Is a retirement plan offered?
The posting describes a Registered Retirement Savings Plan that the company matches with dollar-for-dollar matching up to 6 percent of eligible earnings.
Is the role full-time?
Yes. The listing states full-time employment.
Sample Interview Questions
AI-generated questions tailored to this specific role — a preview of the full practice set.