Staff Engineer, Platform Security Engineering - Encryption and Tokenization

What you'll do

• Lead the design, development, and evolution of encryption, tokenization, and key management solutions.
• Implement production-ready secure data protection capabilities and set technical direction for the team.
• Ensure high availability, disaster recovery, and auditable logging for all encryption services.
• Align cryptographic solutions with company policies and regulatory requirements in partnership with compliance teams.
• Propose scalable and resilient architectural designs for key management systems and data protection workflows.
• Provide technical mentorship to engineers on secure coding, design quality, and operational practices.
• Identify opportunities to improve performance, cost efficiency, and developer experience within the security ecosystem.

What we're looking for

• Bachelor’s degree in computer science, Information Systems, or equivalent work experience with a focus on security and cryptography.
• 6+ years of experience in security or software engineering focused on encryption, tokenization, key management, or cryptography.
• 3+ years of experience contributing to system design, architecture, and security-focused solutions.
• Strong understanding of cryptographic encryption, tokenization, and Key Management Systems (KMS).
• Experience designing and implementing secure, scalable solutions for data at rest using open-source cryptographic libraries and protocols.
• Proficiency in building production-grade services, preferably using Go.
• Working knowledge of key management technologies such as Google Tink, PKCS#11, JCE, and OpenSSL.
• Experience operating stateful systems like PostgreSQL and applying SRE practices including monitoring and incident response.