Staff Engineer, Platform Security Engineering - Encryption and Tokenization

What you'll do

• Lead the design, development, and evolution of encryption, tokenization, and key management solutions.
• Implement production-ready secure data protection capabilities and set technical direction for the team.
• Ensure high availability, disaster recovery, and auditable logging for all encryption services.
• Align cryptographic solutions with company policies and regulatory requirements through cross-functional partnership.
• Propose scalable and resilient architectural designs for key management systems and data workflows.
• Provide technical mentorship to engineers on secure coding, design quality, and operational practices.
• Identify opportunities to improve performance, cost efficiency, and developer experience within the security ecosystem.

What we're looking for

• Bachelor's degree in computer science, Information Systems, or equivalent experience focused on security and cryptography.
• 6+ years of experience in security or software engineering focusing on encryption, tokenization, key management, or cryptography.
• 3+ years of experience contributing to system design, architecture, and security-focused solutions.
• Strong understanding of cryptographic encryption, tokenization, and Key Management Systems (KMS).
• Experience building production-grade services using Go and operating stateful systems like PostgreSQL in cloud environments.
• Proficiency with key management technologies such as Google Tink, PKCS#11, JCE, and OpenSSL.
• Experience applying SRE practices including monitoring, alerting, and incident response using tools like Grafana and Prometheus.
• Experience building CI/CD pipelines and infrastructure as code using tools like Bazel, Terraform, or Argo CD.