Full job description

It all started when engineer Fred Luddy wrote code that automated a tedious task for his coworker, Phyllis. She cried tears of joy. That moment inspired Fred to build a company that could do that for everyone—freeing people from busywork so they could focus on meaningful work. Today, ServiceNow is the AI control tower for business reinvention. Our ServiceNow AI platform brings together any AI, any data, and any workflow— helping 85% of the Fortune 500® work smarter, faster, and better. We're building an AI-native culture where technology and talent are unstoppable together. And we're just getting started.

Join us to put AI to work for people.

Team:

The Platform Access Controls team is within the Platform Security Core Organization and owns ServiceNow's core authorization frameworks, including ACLs, Security Policies, Security Attributes, and Security Filters. We are responsible for validating identity and access for every transaction across the platform, helping ensure a secure-by-default experience. Our team consists of passionate, self-directed engineers who enjoy solving complex security challenges and building scalable security controls. We foster a highly collaborative culture across distributed teams, empowering individuals with the support, autonomy, and opportunities needed to grow and succeed.

As a Senior Staff Software Engineer, you’ll be a key technical leader in the Platform Access Controls group. You’ll set the architectural direction for the access control layer as it expands into securing AI Agent access across the product stack and raise the bar for engineering craftmanship across the organization.

What you get to do in this role:

Set the technical vision and architecture strategy for the authorization platform, balancing long-term scalability and delivery objectives while maintaining a secure-by-default posture.
Work on core Authorization frameworks that touch every part of the product, keeping it high-quality, reliable, secure and fast.
Own features from design through delivery, turning business requirements into well-architected, cross-team solutions.
Lead design and code reviews, championing access control best practices, performance, maintainability, and testability across multiple teams
Implement software that is simple to use to allow customers, applications to extend and customize the functionality to meet their specific needs.
Define comprehensive test strategies covering functional, regression, integration and performance testing
Diagnose, resolve, root cause and mitigation plans for the hardest production issues across the security stack