Staff Platform Security Engineer: Encryption & Tokenization

Dormont Manufacturing Co; Bethesda (MD); On-site; USD 110,000 - 230,000; Full time

Benefits offered by this job

Total Rewards program

401K with 6% match

Tuition assistance

GEICO Flex – remote up to 4 weeks/year

Job summary

GEICO's Platform Security Engineering organization is seeking a Staff Engineer to lead encryption, tokenization, and key management initiatives. You will design, build, and maintain data protection platforms and drive secure implementations across production systems.

You will mentor engineers, collaborate with compliance and product teams, and help shape architecture and best practices for scalable, auditable cryptographic solutions in a cloud environment.

Qualifications

• Six+ years of security or software engineering focusing on encryption, tokenization, key management, or cryptography.
• Three+ years contributing to system design, architecture, and security-focused solutions.
• Experience with open-source security/cryptography frameworks.
• Experience building and operating in cloud environments (AWS, GCP, Azure).
• Familiarity with hardware security modules (HSMs) and cryptography standards.

Responsibilities

• Lead encryption, tokenization, and key management solution design and evolution.
• Implement secure data protection capabilities with production-ready systems.
• Ensure high availability, DR, observability, and auditable logging for crypto services.

Skills

Security mindset

System design

Mentorship

Strong communication

Problem solving

Education

Bachelor's degree in CS/SE or related

Tools

Go

PostgreSQL

KMS

OpenSSL

GCP/AWS/Azure

Grafana/Prometheus/OpenTelemetry

Terraform

Argo CD/Workflows/Rollouts

Google Tink

Job description

GEICO's Platform Security Engineering organization is seeking a Staff Engineer to lead encryption, tokenization, and key management initiatives. You will design, build, and maintain data protection platforms and drive secure implementations across production systems.

You will mentor engineers, collaborate with compliance and product teams, and help shape architecture and best practices for scalable, auditable cryptographic solutions in a cloud environment.