Principal Engineer, Fraud & Product Security

HealthEquity, Inc.; United States; Remote; USD 127,000 - 180,000; Full time

Job summary

Join a forward-thinking company where you can make a significant impact on healthcare by designing scalable software solutions. As a Principal Engineer, you will lead the development of secure, high-performance services that enhance fraud and security defenses. This remote role offers the opportunity to mentor senior engineers while working with cutting-edge technologies like Go, Rust, and Kubernetes. Enjoy a collaborative environment that values your contributions and provides a comprehensive benefits package, including medical insurance, paid time off, and ongoing education assistance. Be part of a mission-driven team dedicated to empowering healthcare consumers.

Benefits

Medical, dental, and vision insurance

HSA contributions and matching

Dependent care FSA match

Uncapped paid time off

Adventure accounts

Paid parental leave

401(k) match

Financial literacy programs

Ongoing education and tuition assistance

Gym and fitness reimbursement

Qualifications

• 8+ years of software engineering experience with a focus on security.
• Proficiency in Go or Rust and experience with Kubernetes.

Responsibilities

• Architect and build microservices and APIs for fraud detection.
• Conduct code reviews and enforce secure development practices.

Skills

Go

Rust

Kubernetes

CI/CD

Cryptography

AI/ML Integration

Secure Coding

Distributed Systems

Cloud Security

Observability

Education

Bachelor's degree in Computer Science

M.S./Ph.D. in Computer Science or related fields

Tools

Terraform

CloudFormation

Helm

GitHub Actions

Azure DevOps

Jenkins

ELK

Prometheus

Grafana

Job description

Our Mission

Our mission is to SAVE AND IMPROVE LIVES BY EMPOWERING HEALTHCARE CONSUMERS. Come be part of something remarkable.

Overview

How you can make a difference

The Principal Engineer will design and deliver scalable software solutions that support HealthEquity’s fraud and security defenses. You will lead the development of secure, high-performance services, integrating real-time risk scoring, ML inference, and policy enforcement, while ensuring reliability and performance. Additionally, you will mentor senior engineers on best practices in secure coding, cloud architecture, and DevSecOps principles.

What you’ll be doing

1. Technical Solution Delivery: Architect and build microservices and APIs for fraud detection and authentication using Go or Rust, interfacing with event streams and AI/ML engines. Integrate model inference pipelines to provide sub-millisecond risk scores within transaction flows.
2. Secure Development Practices: Conduct detailed code reviews, enforce input validation and secure dependency management, and incorporate SAST/DAST scans into CI pipelines. Collaborate on threat modeling and remediation for vulnerabilities.
3. Cloud Infrastructure & Operations: Define and maintain IaC modules (e.g., Terraform, CloudFormation) and Kubernetes manifests; optimize auto-scaling, fault tolerance, and deployment strategies. Develop dashboards and alerts for service health, latency, error rates, and security incidents.
4. Technical Mentorship: Pair-program and facilitate design workshops with engineers, sharing best practices for secure gRPC, observability, and resilient architectures. Develop documentation, run knowledge-sharing sessions, and establish engineering standards.

What you will need to be successful

• Bachelor's degree in Computer Science, Software Engineering, Security, or related fields.
• 8+ years of software engineering experience, with 3+ years in security or fraud domains.
• Proficiency in Go or Rust, with a solid understanding of concurrent programming and distributed systems.
• Experience designing and managing Kubernetes-based services with CI/CD pipelines.
• Expertise in cryptographic libraries, authentication protocols, and secure coding guidelines.
• Advanced degree (M.S./Ph.D.) in Computer Science, Physics, Mathematics, or related fields.
• Experience integrating AI/ML models into production environments.
• Knowledge of DevSecOps tools and service meshes (e.g., Istio).
• Cloud certifications (Azure Solutions Architect, AWS Security).
• Proficiency in programming languages including Go, Rust, Java, and Python.
• Experience with Kubernetes and Helm for container orchestration.
• Strong understanding of security protocols such as JWT/OAuth2, TLS, and Vault.
• Experience with CI/CD tools like GitHub Actions, Azure DevOps, Jenkins.
• Knowledge of logging and metrics tools including ELK, Prometheus, Grafana.

#LI-Remote

This is a remote position.

Salary Range

$127,000.00 to $180,000.00 per year

Benefits & Perks

The actual offer depends on experience, education, skills, and location. Benefits include:

• Medical, dental, and vision insurance
• HSA contributions and matching
• Dependent care FSA match
• Uncapped paid time off
• Adventure accounts
• Paid parental leave
• 401(k) match
• Financial literacy programs
• Ongoing education and tuition assistance
• Gym and fitness reimbursement
• Wellness incentives

Why work with HealthEquity

Our vision is to make HSAs as popular as retirement accounts by 2030, helping American families connect health and wealth. Join us for a workplace where people are valued more than titles. Learn more.

You belong at HealthEquity!

We are an equal opportunity employer committed to diversity and inclusion. We ensure nondiscrimination regardless of race, age, gender, sexual orientation, disability, veteran status, or other protected characteristics. We are a drug-free workplace. For more info, visit our Careers page.

We use Microsoft Copilot for interview transcription with candidate consent. You may opt out by notifying your Talent Partner. Your privacy is important to us; see our Privacy Policy for details.