Staff Software Engineer, Platform Cryptography

Description

The Platform Security team builds foundational security infrastructure and AI-driven detection systems for large enterprise operations, aiming to make security proactive, intelligent and built into the platform itself.

Cryptography within Platform Security runs the cryptographic core of the platform across certificate lifecycle, key management, secrets distribution and workload identity for a SaaS product. This is core security engineering in a regulated environment.

This staff role designs and delivers enterprise-scale security solutions that join cryptographic systems with machine learning, reasoning engines and real-time inference. The work covers key management, PKI and secrets infrastructure at SaaS scale, with intelligent, adaptive systems that you help design and run.

You will need deep applied cryptography knowledge, strong technical leadership and hands-on machine learning depth.

Responsibilities

• Design, build and maintain scalable, secure cryptographic services that meet FIPS compliance and regulated-environment requirements.
• Build and run critical crypto services where reliability and security are primary design constraints.
• Own services end to end on Kubernetes in a multi-tenant SaaS setting, covering deployment, scaling, on-call and incident response.
• Threat model each feature during design reviews, not only the expected path. The team is actively raising its skill here.
• Judge where AI and ML fit in crypto and security work, such as anomaly detection in key usage, ML-assisted certificate risk scoring and AI-assisted review for cryptographic anti-patterns, and reject uses that add little value.
• Work with product owners, security architects and platform teams to turn compliance and security requirements into working cryptographic frameworks.
• Coach engineers on secure coding, cryptographic pitfalls and rigorous design review.
• Track cryptographic advances, including post-quantum readiness, and bring them in before they become compliance deadlines.

Requirements

• Nice to have: direct work in cryptography, PKI, key management or secrets management, such as certificate lifecycle systems, HSM or KMS integration, or crypto-agility work.
• Nice to have: some hands-on AI/ML experience, not research, applying ML to security or ops problems like anomaly detection, risk scoring or log and telemetry analysis, or integrating LLM tools into engineering workflows.
• Nice to have: experience in regulated environments such as FIPS 140-2/3, FedRAMP, Common Criteria or similar.
• Nice to have: exposure to post-quantum cryptography.
• Nice to have: a record of mentoring engineers and raising the security bar on a team, beyond shipping features.
• Required: 8+ years of professional software engineering experience in Java, Go or a comparable strongly typed language at production scale.
• Required: solid computer science fundamentals, including data structures, algorithms, object-oriented design and distributed systems tradeoffs.
• Required: production experience running services on Kubernetes, including deployments, Helm and CI/CD, in a SaaS or multi-tenant setting. This is expected, not a differentiator.
• Required: working knowledge of core cryptographic primitives, including symmetric and asymmetric encryption, hashing, digital signatures and TLS/PKI fundamentals.
• Required: a security-first habit of secure coding, threat modeling and disciplined code review.

Conditions

For roles in this location, base pay is $166,500 - $291,400, plus equity where applicable, variable or incentive pay and benefits. Pay depends on location, qualifications, skill level and competencies, so the base shown is a guideline.

Work persona is assigned by the nature of the work and work location: flexible, remote or required in office. The company may check the distance between your home and the nearest office using a third-party service to confirm eligibility.

Benefits

• Health plans including flexible spending accounts, a 401(k) with company match, ESPP, matching donations, flexible time away and family leave programs.