Staff Engineer, Platform Security Engineering - Encryption and Tokenization

GEICO

Confirmed live today High trust
Hybrid

Quick summary

Work type
Hybrid
Location
Bethesda, MDPalo Alto, CADallas, TXSeattle, WA
Salary
$110,000–$230,000 / yr
Employment
Full-time
Posted
68 days ago
Freshness
Confirmed live today

Market check

Salary context

Below market

How this pay compares to similar roles

Similar $199k
This role $170k
$95k $254k
below market most similar roles pay here above market

This role pays less than 68% of similar roles. Most pay $158,750–$239,000 — the blue band above. At the midpoint, this role pays about $170k versus about $199k for comparable roles.

Based on 240 similar postings.

Employer

About GEICO

GEICO (Government Employees Insurance Company) is one of the largest auto insurers in the United States, offering affordable auto, home, renters, and other personal insurance products. Industry: Insurance

GEICO currently has 73 open roles on FindRole.

Listed pay typically runs $115,000–$230,000 across 70 roles with salary data.

Most-posted roles

View all roles at GEICO

At a glance

TL;DR · Staff Engineer, Platform Security Engineering - Encryption and Tokenization

The Staff Engineer - Platform Security Engineering – Encryption and Tokenization joins the Platform Security Engineering organization to design, build, and evolve a robust data protection platform. This role involves leading the development of encryption, tokenization, and key management solutions to protect sensitive data across the organization. You will drive hands-on implementation of production-ready systems, ensuring high availability, disaster recovery, and auditable logging while providing technical mentorship. Key technologies include Go, PostgreSQL, Google Tink, PKCS#11, JCE, and OpenSSL. You will also utilize SRE practices with Grafana, Prometheus, and Open Telemetry, alongside infrastructure as code tools like Bazel, Terraform, and Argo CD. The work focuses on solving complex cryptographic problems, managing hardware security modules, and aligning security workflows with regulatory requirements.

What you'll do

  • Lead the design, development, and evolution of encryption, tokenization, and key management solutions.
  • Drive hands-on implementation of secure data protection capabilities for production-ready systems.
  • Ensure the quality, reliability, and operational excellence of encryption services including high availability and disaster recovery.
  • Partner with compliance and security teams to align cryptographic solutions with company policies and regulations.
  • Propose scalable and resilient designs for key management systems and data protection workflows.
  • Provide technical mentorship to engineers on secure coding, design quality, and operational practices.
  • Identify opportunities to improve performance, cost efficiency, and developer experience within the security ecosystem.

What we're looking for

  • Bachelor’s degree in computer science, Information Systems, or equivalent work experience with a focus on security and cryptography.
  • 6+ years of experience in security or software engineering with a focus on encryption, tokenization, key management, or cryptography.
  • 3+ years of experience contributing to system design, architecture, and security focused solutions.
  • Strong understanding of cryptographic encryption, tokenization, and Key Management Systems (KMS).
  • Experience designing and implementing secure, scalable solutions for data at rest encryption using open-source cryptographic libraries and protocols.
  • Strong software engineering skills with experience building production grade services (Go preferred).
  • Experience operating stateful systems such as PostgreSQL and applying site reliability engineering (SRE) practices.
  • Experience building and maintaining CI/CD pipelines and infrastructure as code (e.g., Bazel, Terraform, Argo CD/Workflows/Rollouts).

More like this

Similar roles

Staff Engineer - ADCS

GEICO

Bethesda, MD +2 20 days ago $115,000–$230,000
Go Python Java Rust Kubernetes Docker AWS Azure GCP OpenShift Terraform CI/CD CircleCI SonarQube Git Prometheus Grafana Cryptography PKI Microsoft ADCS
6+ yrs exp Hybrid

Staff Platform Security Engineer

Early Warning Services

Scottsdale, AZ +2 22 days ago $132,000–$165,000
AWS Kubernetes CI/CD Policy as Code Cloud Infrastructure Platform Engineering Security Engineering Security Automation Runtime Operations Service Lifecycle Management CKS
8+ yrs exp Hybrid

Staff Engineer, Cloud Security

Toast, Inc.

Remote 6 days ago $193,000–$309,000
AWS Kubernetes Terraform Python Go CNAPP CSPM IAM EKS Infrastructure as Code Threat Modeling GCP Azure PCI DSS SOC 2
8+ yrs exp Remote

Staff Security Engineer

Uber

Seattle, WA 8 days ago
EDR XDR Zero Trust SASE ZTNA Python Golang Java C/C++ Endpoint Security Infrastructure Security System Hardening Data Loss Prevention SaaS Security AI/ML Automation macOS Windows Linux
7+ yrs exp Hybrid

Encryption-as-a-Service (EaaS) Platform Engineer

State Street

Quincy, MA +7 28 days ago
Encryption Key Management Secrets Management Platform Engineering AWS Microsoft Azure Google Cloud Platform OCI Python PowerShell Bash Java C# Go Terraform Ansible Jenkins Harness CI/CD Docker Kubernetes OpenShift REST APIs Spring Boot Microservices Git Bitbucket Fortanix DSM AWS KMS Azure Key Vault Google Cloud KMS
5+ yrs exp

Staff Engineer, Platform Engineering

Early Warning Services

Scottsdale, AZ +3 78 days ago $145,000–$186,000
AWS Kubernetes Terraform Python Java JavaScript Shell Docker Podman Harness GitLab Artifactory AWS CloudFormation CI/CD Infrastructure as Code Container Orchestration
8+ yrs exp Hybrid