Principal Engineer, Fraud & Product Security

HealthEquity; Draper (UT); Remote; USD 127,000 - 180,000; Full time

Job summary

Join a forward-thinking company as a Principal Engineer, where you will lead the design and delivery of innovative software solutions that enhance fraud and product security. This exciting role involves architecting scalable microservices and APIs, mentoring fellow engineers, and implementing secure coding practices. You will work with cutting-edge technologies in a remote environment, contributing to a mission that empowers healthcare consumers. If you're passionate about security and software engineering, this is the perfect opportunity to make a meaningful impact.

Benefits

Medical, dental, and vision insurance

HSA contributions and match

Dependent care FSA match

Uncapped paid time off

Adventure accounts

Paid parental leave

401(k) match

Financial literacy programs

Ongoing education and tuition assistance

Gym and fitness reimbursement

Qualifications

• 8+ years of software engineering experience with a focus on security.
• Experience in designing and operating Kubernetes-based services.
• Proficiency in Go or Rust and understanding of concurrent programming.

Responsibilities

• Architect and build microservices and APIs for fraud detection.
• Conduct in-depth code reviews and enforce secure development practices.
• Define and maintain IaC modules and optimize cloud infrastructure.

Skills

Go

Rust

Kubernetes

CI/CD

AI/ML Integration

Secure Coding

Cryptographic Libraries

Authentication Protocols

Cloud Architecture

Observability

Education

Bachelor's degree in Computer Science

Advanced degree (M.S./Ph.D.)

Tools

Terraform

CloudFormation

GitHub Actions

Azure DevOps

Jenkins

ELK

Prometheus

Grafana

Job description

Principal Engineer, Fraud & Product Security

Job Locations: US-Remote

Our Mission

Our mission is to SAVE AND IMPROVE LIVES BY EMPOWERING HEALTHCARE CONSUMERS. Come be part of something remarkable.

Overview

How you can make a difference

The Principal Engineer will design and deliver scalable software solutions that power HealthEquity's fraud and security defenses. You will lead the development of secure, high-performance services—integrating real-time risk scoring, ML inference, and policy enforcement—while ensuring reliability and performance. Additionally, you will guide senior engineers on best practices in secure coding, cloud architecture, and DevSecOps principles.

What you'll be doing

• Technical Solution Delivery: Architect and build microservices and APIs for fraud detection and authentication in Go or Rust, interfacing with event streams and AI/ML engines. Integrate model inference pipelines to provide sub-millisecond risk scores within transaction flows.
• Secure Development Practices: Conduct in-depth code reviews, enforce input validation and secure dependency management, and embed SAST/DAST scans into CI pipelines. Collaborate on threat models and remediation plans for newly discovered vulnerabilities.
• Cloud Infrastructure & Operations: Define and maintain IaC modules (e.g., Terraform, CloudFormation) and Kubernetes manifests; optimize auto-scaling, fault-tolerance, and blue-green deployments. Build dashboards and alerts for service health, latency, error rates, and security incidents.
• Technical Mentorship: Pair-program and hold design workshops with engineers, sharing patterns for secure gRPC, observability, and resilient architectures. Develop documentation, run brown-bag sessions, and set engineering standards.

What you will need to be successful

• Bachelor's degree in Computer Science, Software Engineering, Security, or related field.
• 8+ years of software engineering experience, with 3+ years in security/fraud domains.
• Proficiency in Go or Rust, with understanding of concurrent programming and distributed systems.
• Experience designing and operating Kubernetes-based services with CI/CD pipelines.
• Expertise in cryptographic libraries, authentication protocols, and secure coding guidelines.
• Advanced degree (M.S./Ph.D.) in related fields.
• Experience integrating AI/ML models into production services.
• Knowledge of DevSecOps tooling and service meshes (e.g., Istio).
• Cloud certifications (Azure Solutions Architect, AWS Security).
• Proficiency in programming languages including Go, Rust, Java, and Python.
• Experience with container orchestration using Kubernetes and Helm.
• Strong understanding of security protocols such as JWT/OAuth2, TLS, and Vault.
• Experience with CI/CD pipelines using GitHub Actions, Azure DevOps, Jenkins.
• Expertise in logging and metrics tools like ELK, Prometheus, Grafana.

#LI-Remote

This is a remote position.

Salary Range

$127,000.00 to $180,000.00 per year

Benefits & Perks

The actual compensation will depend on experience and qualifications. Benefits include:

• Medical, dental, and vision insurance
• HSA contributions and match
• Dependent care FSA match
• Uncapped paid time off
• Adventure accounts
• Paid parental leave
• 401(k) match
• Financial literacy programs
• Ongoing education and tuition assistance
• Gym and fitness reimbursement
• Wellness incentives

Why work with HealthEquity

Our vision is to make HSAs as popular as retirement accounts by 2030. We value our employees and foster an inclusive environment. Learn more on our Careers page. HealthEquity is an equal opportunity employer committed to diversity and inclusion. We ensure all applicants and employees are treated fairly regardless of background or identity. We are a drug-free workplace. For more information, visit our policies on the Careers page.

By scheduling an interview, you consent to Microsoft Copilot recording and transcribing your interview for note-taking and summaries, with options to opt out. We prioritize your privacy; see our privacy policies for details.