{"id":916376,"url":"https://alion.io/job/veeam-software-senior-engineer-access-entitlements","title":"Senior Engineer - Access Entitlements","company":{"id":2260,"name":"Veeam Software","domain":"veeam.com","url":"https://alion.io/company/veeam-software","size_band":"5000+","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Greenhouse","truth_index":{"grade":"B","score":83,"open_postings":33,"ghost_share":0,"stale_share":0.667,"repost_share":0.03,"time_to_fill_p50_days":45,"computed_at":"2026-11-03T05:54:40Z"}},"role":"Backend","role_family":"Backend","seniority":"senior","employment_type":null,"work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Canada"],"countries":["CA"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":127000,"max_usd":229000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":255},"experience_years_min":6,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Active Directory","optional":false},{"name":"Amazon Neptune","optional":false},{"name":"Amazon Redshift","optional":false},{"name":"Databricks","optional":false},{"name":"ElasticSearch","optional":false},{"name":"Google BigQuery","optional":false},{"name":"Google Workspace","optional":false},{"name":"Java","optional":false},{"name":"Least Privilege","optional":false},{"name":"OpenSearch","optional":false},{"name":"Python","optional":false},{"name":"SharePoint","optional":false},{"name":"Snowflake","optional":false},{"name":"AWS","optional":true},{"name":"IAM","optional":true},{"name":"LDAP","optional":true},{"name":"Rest API","optional":true}],"status":"live","first_seen_at":"2026-09-14T16:51:55Z","employer_posted_date":"2026-10-19","last_verified_at":"2026-11-03T08:49:43Z","board_verified":true,"closed_at":null,"days_open":49,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":49},"description":"Veeam is the Data and AI Trust Company, specializing in helping organizations ensure their data and AI are fully understood, secured, and resilient to enable the acceleration of safe AI at scale. As the market leader in both data resilience and data security posture management, Veeam is built for the convergence of identity, data, security, and AI risk. Headquartered in Seattle with offices in more than 30 countries, Veeam protects over 550,000 customers worldwide, who trust Veeam to keep their businesses running. Join us as we go fearlessly forward together, growing, learning, and making a real impact for some of the world’s biggest brands.\nAbout the Role\nWe are seeking an exceptional Senior Engineer - Access Entitlements to design and scale the systems that discover, normalize, and reason about who has access to what across our customers' entire data estate - on-prem file shares, Active Directory, and SaaS platforms like SharePoint, Google Workspace, and Microsoft 365. You will build the connectors, pipelines, and graph models that turn millions of raw permission grants into an accurate, queryable picture of access across billions of files and identities, powering least-privilege analysis, access certification, and risk detection for enterprise customers\nWhat You'll Do\nEntitlement Scanning: Build and extend connectors that enumerate identities (users, groups, service accounts, computers) and resource-level permissions (ACLs, role assignments, sharing links) across on-prem and SaaS data sources, handling per-connector quirks like SID resolution, inheritance breakage, and nested group membership\nScale & Concurrency: Design entitlement pipelines that safely parallelize across large tenants - correctly handling shared state, batching, and checkpointing so a scan of hundreds of thousands of principals and files can pause, resume, and recover without data loss or duplication\nData Modeling: Own the mapping from raw connector output to normalized entitlement records, and from those records into our identity graph - designing node/edge structures that represent principals, resources, and access grants (including sharing links and group-inherited access) in a way that supports fast traversal at scale\nMulti-Store Architecture: Work across the full data path - Elasticsearch for search-driven access, Databricks/Delta for large-scale analytical joins, and a Neptune-backed graph for relationship queries - making deliberate tradeoffs about what gets synced where, and keeping those stores consistent as data volume grows\nEntitlement-Activity Correlation: Build the pipelines that join static entitlements against observed activity logs to answer \"who can access this, and who actually does\" - the core signal behind over-permission detection and access-risk scoring\nReliability & Correctness: Instrument and test for the failure modes unique to entitlement data - partial scans, malformed ACLs, race conditions in concurrent principal writes, and inconsistent state between graph and source-of-truth stores\nWhat You'll Bring\n6+ years of professional software engineering experience, with meaningful time spent on identity/access systems, security data pipelines, or large-scale distributed data processing\nStrong Go, Java, or Python skills, with direct experience writing concurrent/parallel data pipelines (goroutines, worker pools, or equivalent) and reasoning about race conditions and shared state\nExperience with graph databases or graph query languages (Gremlin, Cypher, or similar) and modeling relationship-heavy data\nFamiliarity with Elasticsearch/OpenSearch and at least one large-scale analytical store (Databricks, Snowflake, BigQuery, Redshift)\nUnderstanding of identity and access concepts - RBAC, ACLs, group membership\nBonus Skills\nExperience with Microsoft Graph API, SharePoint REST APIs, or ActiveDirectory/LDAP-based identity systems\nFamiliarity with AWS Neptune, TinkerPop/Gremlin, or other graph-native databases at production scale\nBackground in DSPM, CIEM, IAM governance, or data security posture tooling\nExperience designing multi-tenant systems with per-tenant data isolation across search, analytical, and graph store\nWhat you'll get\nPaid vacation starting at 15 days per year and increasing to 20 or 25 days based on tenure, with 4 additional global VeeaMe Days and 24 paid volunteer hours annually through Veeam Cares\n\nPaid parental leave that includes 3 weeks for all parents and 12 weeks for birthing parents\n\nMedical, dental, and vision coverage from day one\nMental health support, therapy sessions, and digital wellness tools\nRRSP retirement plan with matching contributions\nFertility support, plus 24 paid volunteer hours through Veeam Cares\nAirVet: 24/7 virtual veterinary care at no cost\nOpportunities to learn and grow through on-demand libraries (LinkedIn Learning, O’Reilly), mentoring, workshops, and learning events like our annual Global Day of Learning\nCompensation Transparency\nVeeam is committed to pay transparency and equitable compensation. For this role, the compensation range below reflects the expected total target compensation (TTC), inclusive of base pay and a competitive performance-based bonus. For roles with a commission plan, the compensation range represents On Target Earnings (OTE), which includes base salary plus variable commission. When determining compensation, Veeam takes into consideration factors such as experience, education, and skills. Offers are typically made below the midpoint of the range.\nPay Range\n$188,200—$349,400 CAD\nVeeam Software is an equal opportunity employer and does not tolerate discrimination in any form on the basis of race, color, religion, gender, age, national origin, citizenship, disability, veteran status or any other classification protected by federal, state or local law. All your information will be kept confidential.\nPersonal data collected during the recruitment process will be processed in accordance with our Recruiting Privacy Notice, which explains how your information is collected, used, and handled in connection with hiring activities. By applying for this position, you consent to this processing. \nBy submitting your application, you confirm that the information provided, including any supporting documents, is complete and accurate to the best of your knowledge. Any misrepresentation, omission, or falsification may result in disqualification from consideration or, if discovered after employment begins, termination of employment.","description_format":"text","description_chars":6488,"description_truncated":false,"requirements":{"experience_years_min":6,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["Parental leave","Retirement plans"],"hiring_locations":[{"name":"Canada","iso":"CA","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Backup & Disaster Recovery"],"lifecycle":[{"event":"open","at":"2026-09-14T20:25:51Z"}],"visa":[],"liveness":{"score":26,"band":"fade","label":"Fading","p_open":1,"p_active":0.593,"p_room":0.44,"age_days":49,"expected_fill_days":45,"reasons":["conf:2","stale_co","velocity","win:tail","crowd:brand"],"computed_at":"2026-11-03T05:54:40Z"},"pay":null,"html_url":"https://alion.io/job/veeam-software-senior-engineer-access-entitlements","json_url":"https://alion.io/job/veeam-software-senior-engineer-access-entitlements.json","meta":{"generated_at":"2026-11-03T12:54:12Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":17770,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-04T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":2260},"rest":"https://alion.io/mcp/rest/get_company?id=2260"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fveeam-software-senior-engineer-access-entitlements"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fveeam-software-senior-engineer-access-entitlements"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fveeam-software-senior-engineer-access-entitlements"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/veeam-software-senior-engineer-access-entitlements\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fveeam-software-senior-engineer-access-entitlements"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":916376}},{"tool":"search_jobs","arguments":{"company":"veeam.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":916376},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}