Software Engineer II

About the Role

Uber's AI Security team, part of Core Security Engineering, is building the foundational security platforms that enable AI at Uber to operate safely and at scale. As agentic workflows and the Model Context Protocol (MCP) become core to how teams build software, we are redefining identity, access control, and policy enforcement for both humans and AI agents.

This role will have the opportunity to work on securing MCPs, building agent identity and identity propagation, and delivering risk-based, adaptive access control as part of Uber's Zero Trust Architecture. You will help design and build backend systems that determine who or what can access which resources, under what context, and with what level of risk, in real time.

What the Candidate Will Need / Bonus Points

\\-\\-\\-\\- What the Candidate Will Do ----

1. Design and build backend systems that secure MCP servers, AI tools, and agent-initiated actions
2. Implement agent identity, identity propagation, and just-in-time credential flows across services and platforms
3. Build and evolve security gateways (e.g., MCP Gateway) providing authentication, authorization, observability, and guardrails
4. Implement risk-based and adaptive access control, integrating contextual signals (identity, behavior, environment, risk signals) into authorization decisions
5. Partner with Risk and AuthZ systems to move from static rules and manual approvals to real-time, contextual access decisions
6. Ensure systems are production-ready through strong reliability practices, monitoring, and operational ownership
7. Collaborate closely with Dev Platform, Risk, Privacy, ML, and Infrastructure teams to embed security into core AI platforms

\\-\\-\\-\\- Basic Qualifications ----

1. 3+ years of experience building and operating backend or infrastructure systems in production
2. Strong proficiency in one or more backend languages (e.g. Go, Python, Java, or similar)
3. Experience designing and owning APIs, services, or platforms used by other engineers
4. Solid understanding of distributed systems fundamentals (auth flows, latency, reliability, failure modes)
5. Ability to translate security, identity, and platform requirements into concrete system designs

\\-\\-\\-\\- Preferred Qualifications ----

1. Experience with identity, authentication, authorization, or access control systems
2. Familiarity with Zero Trust or identity-based security architectures
3. Experience building risk-aware or policy-driven systems (e.g., contextual authorization, approvals, gating, enforcement)
4. Experience with security-sensitive infrastructure such as gateways, credential distribution, policy engines, or audit systems
5. Familiarity with large-scale data or streaming systems (Kafka, Spark, Flink, Pinot, Hive, Cassandra)
6. Strong cross-functional communication skills

For San Francisco, CA-based roles: The base salary range for this role is USD$171,000 per year - USD$190,000 per year.

For Seattle, WA-based roles: The base salary range for this role is USD$171,000 per year - USD$190,000 per year.

For all US locations, you will be eligible to participate in Uber's bonus program, and may be offered an equity award & other types of comp. You will also be eligible for various benefits. More details can be found at the following link [](;br>
Uber's mission is to reimagine the way the world moves for the better. Here, bold ideas create real-world impact, challenges drive growth, and speed fuels progress. What moves us, moves the world - let's move it forward, together.

Uber is proud to be an Equal Opportunity employer. All qualified applicants will receive consideration for employment without regard to sex, gender identity, sexual orientation, race, color, religion, national origin, disability, protected Veteran status, age, or any other characteristic protected by law. We also consider qualified applicants regardless of criminal histories, consistent with legal requirements. If you have a disability or special need that requires accommodation, please let us know by completing [this form](;br>
Offices continue to be central to collaboration and Uber's cultural identity. Unless formally approved to work fully remotely, Uber expects employees to spend at least half of their work time in their assigned office. For certain roles, such as those based at green-light hubs, employees are expected to be in-office for 100% of their time. Please speak with your recruiter to better understand in-office expectations for this role.