About the job
What is Box?
Box (NYSE:BOX) stands at the forefront of Intelligent Content Management, empowering organizations with tools to enhance collaboration, manage the content lifecycle, secure vital information, and innovate business workflows through enterprise AI. Founded in 2005, Box has transformed how leading global companies, including JLL, Morgan Stanley, and Nationwide, operate in the new AI-driven business landscape. Our headquarters is located in Redwood City, CA, with additional offices across the United States, Europe, and Asia.
Joining Box means being part of a mission to revolutionize content management, making it smarter and more efficient. Our platform supports the flow of billions of files every day—encompassing contracts, invoices, employee records, financial statements, product specifications, marketing materials, and beyond. With the integration of AI, our goal is to redefine workflows across organizations, enabling teams to work together seamlessly.
Why Box Needs You
The Identity and Security Foundation (ISF) team is crucial to Box's operations, acting as the gatekeeper for all access to our services. We oversee the authentication processes across various platforms, including web, API, microservices, and SSO, ensuring a secure environment for our users. As we shift toward an AI-centric content platform, ISF is pivotal in safeguarding the next generation of intelligent experiences, extending our identity and access frameworks to support AI services, and maintaining secure interactions between users and applications.
Our responsibilities include scaling systems to manage billions of requests daily, enhancing security features, rethinking authentication methods for a multi-device world, and laying the groundwork for AI-driven workflows. Our contributions are vital to realizing Box's ambitious vision for the future.
Your Role
- Design, develop, and maintain robust authentication and authorization systems utilizing technologies such as Java, PHP, Docker, and Kubernetes.
- Construct high-quality microservices focused on security features, including MFA, SSO, OAuth2.0, OIDC, JWT Auth, and token management.

