Staff Platform Security Engineer — Encryption & Tokenization

GEICO; Northern (KY); Hybrid; USD 110,000 - 230,000; Full time

Job summary

GEICO is seeking a Staff Engineer for Platform Security Engineering focusing on Encryption and Tokenization to design, build, and evolve secure data protection platforms. This role partners with cross-functional teams to implement production-ready components and guide security practices across the stack.

You will shape architectural direction, mentor engineers, and influence best practices for cryptographic solutions, key management, and compliant data security across GEICO's platforms.

Qualifications

• 6+ years in security or software engineering focusing on encryption, tokenization, or cryptography.
• Experience designing scalable data protection solutions and KMS integrations.
• Experience in cloud environments (AWS, GCP, Azure) and CI/CD tooling.

Responsibilities

• Lead the design, development, and evolution of encryption, tokenization, and key management solutions within a defined platform or product domain.
• Drive hands-on implementation of secure data protection capabilities, contributing directly to production-ready systems while setting technical direction for the team.
• Ensure the quality, reliability, and operational excellence of encryption and tokenization services, including high availability, disaster recovery, observability, and auditable logging.
• Partner closely with compliance, security, data governance, and application teams to ensure cryptographic solutions align with company policies and regulatory requirements.

Skills

Cryptography

Tokenization

Key Management Systems (KMS)

Go programming

PostgreSQL

CI/CD pipelines

Cloud (AWS/GCP/Azure)

SRE practices

OpenSSL

Communication skills

Education

Bachelor's degree in CS/IS or equivalent

Tools

Google Tink

PKCS#11

JCE

OpenSSL

Bazel

Terraform

Argo CD/Workflows/Rollouts

Job description

GEICO is seeking a Staff Engineer for Platform Security Engineering focusing on Encryption and Tokenization to design, build, and evolve secure data protection platforms. This role partners with cross-functional teams to implement production-ready components and guide security practices across the stack.

You will shape architectural direction, mentor engineers, and influence best practices for cryptographic solutions, key management, and compliant data security across GEICO's platforms.