Senior Platform Security Engineer - TLS & PKI Lead

Spade; New York (NY); Hybrid; USD 140,000 - 210,000; Full time

Benefits offered by this job

Competitive Compensation

Meaningful Equity

Comprehensive Health Benefits

401(k)

Paid Parental Leave

Unlimited PTO

Flexible In-Person Culture

Remote opportunities in US/Canada

Work from home stipend

Citibike Membership

Job summary

Spade is seeking a Senior Platform Security Engineer to own the security of our production edge interfacing with enterprise bank customers. You will manage mutual-TLS certificates, secure private network connectivity, and oversee webhook security, driving end-to-end vulnerability remediation.

The role requires hands-on AWS security experience, deep PKI knowledge, and a track record of partnering with engineering teams to codify secure-build standards.

Qualifications

• 6+ years in platform, infrastructure, or network security with production ownership.
• Deep experience with PKI and certificate lifecycle management.
• Strong TLS/mTLS understanding and secure-build practices.
• Hands-on AWS networking and security.
• Knowledge of OAuth 2.0, client-credentials flow, JWT validation.
• Experience setting security standards with engineering teams.

Responsibilities

• Own the security of Spade's production edge for enterprise bank customers.
• Manage mutual-TLS certificate infrastructure
• Build/maintain security workflow for private network connectivity
• Secure webhook delivery, rotation, and error handling
• Drive end-to-end vulnerability remediation from scanning to closure
• Codify secure-build standards for engineering
• Collaborate across engineering, product, and GTM to improve security posture

Skills

PKI

TLS/mTLS

AWS Networking

OAuth 2.0

JWT Validation

Security Standards

Certificate Lifecycle

Fintech/Payments

AWS CDK

PCI DSS SOC 2

Job description

Spade is seeking a Senior Platform Security Engineer to own the security of our production edge interfacing with enterprise bank customers. You will manage mutual-TLS certificates, secure private network connectivity, and oversee webhook security, driving end-to-end vulnerability remediation.

The role requires hands-on AWS security experience, deep PKI knowledge, and a track record of partnering with engineering teams to codify secure-build standards.