Staff Platform Security Engineer - Encryption

Geico; Dallas (TX); On-site; USD 138,000 - 184,000; Full time

Job summary

GEICO is seeking a Staff Engineer in Platform Security Engineering focused on encryption and tokenization. You will design and implement secure data protection platforms, collaborating with cross-functional teams to ensure compliant, scalable security solutions across data in use and at rest.

The role emphasizes leadership, reliability, and cryptographic innovations. The position requires extensive experience with cryptography, KMS, and production-grade services in cloud environments, plus

Qualifications

• 6+ years in security or software engineering focusing on encryption or cryptography.
• Experience with data at rest encryption and cryptographic libraries.
• Production-grade services in cloud environments (AWS, GCP, Azure).
• Collaborate with compliance and product teams to meet policy requirements.

Responsibilities

• Lead design, development, and evolution of encryption and tokenization solutions.
• Drive secure data protection features with high availability and auditable logging.
• Partner with compliance, data governance, and application teams on cryptographic solutions.
• Mentor engineers to raise secure coding and design quality.

Skills

Cryptography

Tokenization

Key Management

Go programming

PostgreSQL

SRE practices

CI/CD

OpenSSL

Cloud AWS

Education

Bachelor's degree in Computer Science or equivalent

Tools

Google Tink

PKCS#11

JCE

OpenSSL

Grafana

Prometheus

OpenTelemetry

eBPF

Terraform

Bazel

Argo CD/Workflows

Job description

GEICO is seeking a Staff Engineer in Platform Security Engineering focused on encryption and tokenization. You will design and implement secure data protection platforms, collaborating with cross-functional teams to ensure compliant, scalable security solutions across data in use and at rest.

The role emphasizes leadership, reliability, and cryptographic innovations. The position requires extensive experience with cryptography, KMS, and production-grade services in cloud environments, plus