Staff Software Engineer, Platform Cryptography

Description

You will join the Platform Security group, which builds core security infrastructure and AI-driven detection systems for large-scale operations. The goal is security that acts early, adapts intelligently, and fits directly into the company's platform.

The cryptography arm of Platform Security runs the cryptographic foundation of the company's SaaS platform. That covers certificate lifecycles, key management, secrets distribution, and workload identity. The work is core security engineering in a regulated environment.

As a Staff AI Security & Crypto Engineer, you will design and deliver enterprise-scale security systems that combine cryptography with machine learning, reasoning engines, and real-time inference. The role calls for deep applied cryptography knowledge, technical leadership, and hands-on machine learning skill to build adaptive, intelligent systems for key management, PKI, and secrets at SaaS scale.

Responsibilities

• Build and maintain scalable, secure cryptographic services that meet FIPS compliance and regulated-environment requirements.
• Architect and run critical crypto services where reliability and security are treated as primary design constraints.
• Own services end to end on Kubernetes in a multi-tenant SaaS setting, covering deployment, scaling, on-call rotation, and incident response.
• Threat model each feature, not only the expected path, during every design review.
• Assess where AI and ML genuinely help crypto and security work, such as key usage anomaly detection, ML-supported certificate risk scoring, and AI-assisted review for cryptographic mistakes, and separate those from approaches that add little.
• Work with product owners, security architects, and platform teams to turn compliance and security needs into working cryptographic frameworks.
• Coach engineers on secure coding, common cryptographic errors, and rigorous design reviews.
• Track developments in cryptography, including post-quantum readiness, and introduce them before they become compliance requirements.

Requirements

• At least 8 years of professional software engineering experience, including production work in Java, Go, or a similarly strongly typed language.
• Solid computer science fundamentals: data structures, algorithms, object-oriented design, and distributed systems tradeoffs.
• Production experience running services on Kubernetes, including Helm and CI/CD, in a SaaS or multi-tenant environment.
• Working knowledge of core cryptographic primitives, including symmetric and asymmetric encryption, hashing, digital signatures, and TLS and PKI basics.
• Habits of security-first engineering: secure coding, threat modeling, and disciplined code review.
• Preferred: direct experience with cryptography, PKI, key management, or secrets management, such as certificate lifecycle systems, HSM or KMS integration, or crypto-agility work.
• Preferred: hands-on AI or ML experience applied to security or operations problems, such as anomaly detection, risk scoring, or log and telemetry analysis, or bringing LLM tools into engineering workflows. Research background is not required.
• Preferred: experience in regulated environments such as FIPS 140-2 or 140-3, FedRAMP, Common Criteria, or similar.
• Preferred: exposure to post-quantum cryptography.
• Preferred: a record of mentoring engineers and raising a team's security standards beyond shipping features.

Conditions

Base pay for this location is $149,800 to $262,200, with equity where applicable, variable or incentive pay, and benefits.

Base pay is a guideline. Total compensation depends on qualifications, skill level, competencies, and work location, and pay is set by the geographic location of the role and may change.

Sales roles generally use an On Target Earnings incentive structure.

Work persona is flexible, remote, or required in office, assigned by the nature of the work and the employee's work location.

Eligibility for a work persona may be checked by measuring the distance from your primary residence to the nearest company office with a third-party service.

Benefits

• Health plans, including flexible spending accounts.
• 401(k) plan with company match.
• Employee stock purchase plan (ESPP).
• Matching donations.
• Flexible time away.
• Family leave programs.