They don't come and ask a random engineer to install a backdoor. They go in at the top level, with complete secrecy and with the threat of jail time for disclosure, and get their own NSA engineers to install the backdoor. Almost everyone at the companies targeted by PRISM were totally unaware...