Senior Software Engineer - Encryption & PHI
Build and operate backend security systems for encryption, key management, sensitive data, credentials, tenant isolation, and authentication. Requires strong production Python experience, applied cryptography knowledge, and at least 4 years building security-critical systems.
About the job
Responsibilities
- Design and evolve encryption and key-management systems, including key scoping and rotation across hosted, VPC, and on-premises deployments.
- Build controls to detect, transform, and safely handle PHI, PII, and other sensitive data across workflows, connectors, model calls, logs, and storage.
- Secure customer-provided credentials and tokens from storage and access control through runtime use.
- Improve tenant isolation, signing and verification, session and token handling, and service-to-service authentication.
- Build shared Python services, libraries, and APIs for consistent security-critical behavior.
- Plan and execute migrations, compatibility periods, staged rollouts, observability, recovery, and rollback for live systems.
Requirements
- 4+ years of experience building and operating production backend systems.
- Strong professional experience with Python in a substantial production codebase.
- Hands-on experience implementing and operating security-critical product systems.
- Depth in at least one area such as encryption and key management, authentication and token infrastructure, multi-tenant isolation, sensitive-data processing, or secure credential storage and runtime use.
- Practical knowledge of applied cryptography.
- Experience changing critical systems without disrupting existing customers or making previously stored data inaccessible.
- Strong judgment around trust boundaries, failure modes, and consequences of compromise.
- Ability to take ambiguous technical problems from investigation through production rollout.
Nice-to-haves
- HashiCorp Vault, cloud KMS products, HSMs, envelope encryption, or key rotation.
- PHI or PII detection, redaction, pseudonymization, or tokenization.
- PKI, certificate systems, or cryptographic signing.
- Multi-tenant SaaS products handling sensitive customer data.
- Healthcare, payments, identity, financial infrastructure, or other security-sensitive domain experience.
- Self-hosted, VPC, on-premises, or air-gapped deployments.
- AI-agent, LLM, or connector-based application architecture.
- Startup or growth-stage product experience.
Skills
Python, Applied Cryptography, Encryption, Key Management, Authentication, Token Infrastructure, Multi-Tenant Isolation, Phi, Pii, Hashicorp Vault, Cloud Kms, Hsms, Pki, Cryptographic Signing
Similar jobs
Backend Engineering jobs
Baselayer
San Francisco, CA
Build production cryptographic identity infrastructure for AI agents, owning issuer, verification, Passport, or audit-log capabilities. The role requires strong Python or Go expertise, experience shipping security-critical identity systems, and deep familiarity with RFC-driven protocols and asynchronous Python services.
Gusto
New York, NYBuild and scale Gusto’s Payments platform, designing fault-tolerant distributed systems and guiding large technical projects end to end. The role requires 7+ years of experience, strong architectural judgment, and expertise with production software; payments or accounting experience is preferred.
Stripe
South San Francisco, CA
Senior Software Engineer designing and operating high-scale distributed systems and core networking infrastructure for internal product teams. Requires a bachelor’s degree and 5 years of software engineering experience, or a master’s degree with 3 years, plus strong cloud, Java, Go, and Kubernetes expertise.
Replit
Foster City, CA
Build agentic growth and marketing infrastructure spanning attribution, audiences, lifecycle engagement, referrals, promotions, web, mobile, billing, and data. The role requires strong backend software engineering, SQL and data warehouse expertise, and close collaboration with go-to-market teams.
Scale AI
San Francisco, CASenior Software Engineer on the Platform Engineering team, designing and building shared data platforms, cloud infrastructure, orchestration systems, and developer tooling. Requires backend engineering experience, distributed systems expertise, and proficiency with cloud, containerization, databases, and CI/CD.