Staff Engineer - Platform Security Engineering – Encryption and Tokenization
Core
Design, build, and evolve secure data protection platforms ensuring protection of sensitive data throughout the organization.
Role type
Staff Engineer, Platform Security (Encryption & Tokenization)
Builds
Production-ready encryption, tokenization, and key management services
Domain
Insurance / Cryptography & Security
Deliverable
production ML models | product features | infrastructure
Required skills
Cryptographic encryption, tokenization, Key Management Systems (KMS), Go, PostgreSQL, SRE practices, CI/CD pipelines, Infrastructure as Code, Hardware Security Modules (HSMs)
Preferred skills
Open-source cryptographic libraries, Cloud environments (AWS, GCP, Azure), Site Reliability Engineering (Grafana, Prometheus, Open Telemetry, eBPF)
Technologies
Go, PostgreSQL, Google Tink, PKCS#11, JCE, OpenSSL, Bazel, Terraform, Argo CD, Grafana, Prometheus, Open Telemetry, eBPF
Responsibilities
Lead design and development of encryption, tokenization, and key management solutions; Drive hands-on implementation of secure data protection capabilities; Ensure quality, reliability, and operational excellence of encryption services; Partner with compliance and security teams to align cryptographic solutions with policies; Contribute to architectural decisions for key management systems; Provide technical mentorship on secure coding and design quality.
Seniority
Staff, hands-on IC with mentorship