Software Engineer II

Veeam is the Data and AI Trust Company, specializing in helping organizations ensure their data and AI are fully understood, secured, and resilient to enable the acceleration of safe AI at scale. As the market leader in both data resilience and data security posture management, Veeam is built for the convergence of identity, data, security, and AI risk. Headquartered in Seattle with offices in more than 30 countries, Veeam protects over 550,000 customers worldwide, who trust Veeam to keep their businesses running. Join us as we go fearlessly forward together, growing, learning, and making a real impact for some of the world’s biggest brands.
Software Engineer, Veeam Data Cloud (FedRAMP)
We are looking for an experienced Software Engineer to join the Veeam Data Cloud (VDC) engineering team, working on the FedRAMP-compliant version of our SaaS product. The mission of the team is to build a secure, reliable, and easy-to-use data protection service that meets the bar federal customers hold us to — and to prove, in code and in tests, that it does. As a member of the team, you will design and build the microservices and security controls that make that compliance real.
This is an excellent opportunity for someone with cloud services and secure software development experience to help build the world's most successful, modern data protection platform. The ideal candidate will have held similar roles in a rapidly growing SaaS company.
This is not a compliance paperwork position — it's a software engineering role focused on cryptography, authentication, auditability, and the reliability of services running in production.
What you'll do
Design and develop reliable, scalable microservices in Go and C#/.NET, integrated with cloud-based managed services.
Turn compliance requirements handed over by our compliance engineers into working application code — and the tests that prove the behavior holds.
Take FIPS-validated cryptography from requirement to running binary: build configuration, startup assertions, TLS mode enforcement, and CI checks a non-compliant build can't pass.
Instrument privileged operations with structured audit events — actor, target, before and after state, outcome, correlation ID — and wire them into the audit pipeline.
Harden authentication paths: OAuth client authentication with key pairs rather than shared secrets, stateless JWT validation via JWKS, and SAML federation through our identity provider.
Work across service API contracts and generated clients as services move onto private network paths.
Ensure your code is high-quality, thoroughly tested, and FedRAMP-compliant.
Participate in the on-call rotation for product operations.
Take ownership of the reliability and efficiency of your services running in the cloud.
Participate in technical design discussions, review code, and provide feedback to other engineers.
Collaborate with a distributed team — including compliance engineers who will bring you requirements and expect a clear answer on what the code actually does.
What you'll bring
5+ years of experience in the software development industry.