Staff Software Engineer, Platform Cryptography

ServiceNow•San Diego, CA

5h•$166,500 - $291,400

About The Position

Platform Security builds foundational security infrastructure and AI-driven detection systems for enterprise-scale operations. The Cryptography team owns the cryptographic backbone of the ServiceNow platform across certificate lifecycle, key management, secrets distribution, and workload identity for a SaaS platform. The role architects and delivers enterprise-scale security solutions integrating cryptographic systems with machine learning, reasoning engines, and real-time inference. It applies expertise in cryptography, technical leadership, and hands-on machine learning to design and operate security systems for key management, PKI, and secrets infrastructure at SaaS scale. The position designs and maintains scalable cryptographic services that meet FIPS and regulated-environment requirements, and owns mission-critical services end-to-end on Kubernetes in a multi-tenant SaaS environment. It also evaluates appropriate AI/ML applications in security, collaborates across product, security, and platform teams, mentors engineers, and monitors cryptographic advancements including post-quantum readiness.

Requirements

At least 8 years of professional software engineering experience.
Production-scale experience with Java, Go, or a comparable strongly typed language.
Strong computer science fundamentals, including data structures, algorithms, object-oriented design, and distributed systems tradeoffs.
Production experience running services on Kubernetes, including deployments, Helm, and CI/CD, in a SaaS or multi-tenant environment.
Working understanding of cryptographic primitives, including symmetric and asymmetric encryption, hashing, digital signatures, and TLS/PKI fundamentals.
Demonstrated security-first engineering habits, including secure coding practices, threat modeling, and code review discipline.

Nice To Haves

Direct experience in cryptography, PKI, key management, or secrets management, such as certificate lifecycle systems, HSM/KMS integration, or crypto-agility work.
Hands-on AI/ML experience applying techniques to security or operations problems, such as anomaly detection, risk scoring, or log and telemetry analysis, or critically integrating LLM tooling into engineering workflows.
Experience with regulated environments such as FIPS 140-2/3, FedRAMP, Common Criteria, or similar.
Exposure to post-quantum cryptography.
A track record of mentoring engineers and raising the security bar on a team.

Responsibilities

Design, build, and maintain high-quality, scalable, secure cryptographic services that meet FIPS compliance and regulated-environment requirements.
Architect and operate mission-critical cryptographic services with reliability and security as first-class design constraints.
Own services end-to-end on Kubernetes in a multi-tenant SaaS environment, including deployment, scaling, on-call, and incident response.
Apply threat modeling and security considerations during design reviews.
Evaluate appropriate AI/ML applications in cryptography and security, such as anomaly detection in key usage, certificate lifecycle risk scoring, and AI-assisted code review for cryptographic anti-patterns.
Collaborate with product owners, security architects, and platform teams to translate compliance and security requirements into working cryptographic frameworks.
Mentor engineers on secure coding, cryptographic pitfalls, and rigorous design reviews.
Monitor cryptographic advancements, including post-quantum readiness, and bring relevant developments forward ahead of compliance deadlines.