Staff Engineer, Encryption & Tokenization Platform

GEICO; Palo Alto (CA); On-site; USD 110,000 - 230,000; Full time

Benefits offered by this job

GEICO Pledge

Job summary

GEICO’s Platform Security Engineering group seeks a Staff Engineer specializing in Encryption and Tokenization. You will design and maintain secure data protection platforms, leading cryptographic initiatives and contributing to production-ready implementations.

You will mentor engineers, collaborate with cross-functional teams, and help set the security direction for data at rest and in transit, while aligning with regulatory requirements and internal standards.

Qualifications

• Experience designing secure, scalable data-protection solutions for encryption/tokenization.
• Ability to design production-grade services, preferably in Go, with secure coding practices.
• Hands-on knowledge of cryptography libraries and standards.
• Experience with stateful systems like PostgreSQL and cloud environments.
• Familiarity with SRE practices, monitoring, and incident response.

Responsibilities

• Lead encryption, tokenization, and key management design and implementation.
• Develop production-ready data protection services and set technical direction.
• Ensure availability, reliability, and auditable logging for crypto services.
• Collaborate with compliance and security teams to meet policies.
• Propose scalable designs for key management and data workflows.
• Apply modern cryptography trends to improve platform security.
• Mentor engineers on secure coding, design, and ops practices.
• Integrate encryption solutions with product goals and platforms.
• Improve performance and development experience in crypto ecosystems.

Skills

Cryptography

Tokenization

KMS

Go

PostgreSQL

SRE

CI/CD

OpenSSL

HSMs

Cryptography standards

Education

Bachelor’s degree in Computer Science or related field

Tools

Google Tink

PKCS#11

JCE

OpenSSL

Job description

GEICO’s Platform Security Engineering group seeks a Staff Engineer specializing in Encryption and Tokenization. You will design and maintain secure data protection platforms, leading cryptographic initiatives and contributing to production-ready implementations.

You will mentor engineers, collaborate with cross-functional teams, and help set the security direction for data at rest and in transit, while aligning with regulatory requirements and internal standards.