Staff Software Engineer, Platform Cryptography

ServiceNow•Santa Clara, CA

1d•$166,500 - $291,400

About The Position

Platform Security builds foundational security infrastructure and AI-driven detection systems for enterprise-scale operations. Its mission is to make security proactive, intelligent, and integrated into the ServiceNow platform. The Cryptography team owns the platform’s cryptographic backbone across certificate lifecycle, key management, secrets distribution, and workload identity for a SaaS platform, including security engineering for regulated environments. In this role, you will architect and deliver enterprise-scale security solutions integrating cryptographic systems with machine learning, reasoning engines, and real-time inference. You will apply cryptographic expertise, technical leadership, and hands-on machine learning experience to design and operate intelligent security systems for key management, PKI, and secrets infrastructure at SaaS scale. You will build and operate secure cryptographic services, own services end-to-end in a Kubernetes-based multi-tenant environment, and assess practical uses of AI/ML in security. You will work with product owners, security architects, and platform teams to translate compliance and security requirements into cryptographic frameworks, mentor engineers, and track cryptographic advancements such as post-quantum readiness.

Requirements

At least 8 years of professional software engineering experience.
Production-scale experience with Java, Go, or a comparable strongly typed language.
Strong computer science fundamentals, including data structures, algorithms, object-oriented design, and distributed systems tradeoffs.
Production experience running services on Kubernetes, including deployments, Helm, and CI/CD, in a SaaS or multi-tenant environment.
Working understanding of core cryptographic primitives, including symmetric and asymmetric encryption, hashing, digital signatures, and TLS/PKI fundamentals.
Demonstrated security-first engineering habits, including secure coding practices, threat modeling, and code review discipline.

Nice To Haves

Direct experience in cryptography, PKI, key management, or secrets management, such as certificate lifecycle systems, HSM/KMS integration, or crypto-agility work.
Hands-on AI/ML experience applying techniques to security or operations problems, such as anomaly detection, risk scoring, or log and telemetry analysis, or critically integrating LLM tooling into engineering workflows.
Experience in regulated environments, such as FIPS 140-2/3, FedRAMP, Common Criteria, or similar.
Exposure to post-quantum cryptography.
A track record of mentoring engineers and raising a team’s security bar.

Responsibilities

Design, build, and maintain high-quality, scalable, secure cryptographic services that meet FIPS compliance and regulated-environment requirements.
Architect and operate mission-critical cryptographic services, treating reliability and security as first-class design constraints.
Own services end-to-end on Kubernetes in a multi-tenant SaaS environment, including deployment, scaling, on-call responsibilities, and incident response.
Apply threat modeling and security-minded review practices to designs and features.
Evaluate appropriate applications of AI/ML in cryptography and security, including anomaly detection in key usage, certificate lifecycle risk scoring, and AI-assisted code review for cryptographic anti-patterns.
Collaborate with product owners, security architects, and platform teams to turn compliance and security requirements into working cryptographic frameworks.
Mentor engineers on secure coding, cryptographic pitfalls, and rigorous design reviews.
Stay current on cryptographic advancements, including post-quantum readiness, and raise relevant considerations before compliance deadlines.