Staff Software Engineer, Platform Cryptography

ServiceNow•San Diego, CA

3h•$149,800 - $262,200

About The Position

Platform Security builds foundational security infrastructure and AI-driven detection systems for enterprise-scale operations. Its mission is to make security proactive, intelligent, and seamlessly integrated into the ServiceNow platform. The Cryptography team owns the platform’s cryptographic backbone across certificate lifecycle, key management, secrets distribution, and workload identity for a SaaS platform. The role involves architecting and delivering enterprise-scale security solutions that integrate cryptographic systems with machine learning, reasoning engines, and real-time inference. The engineer will apply cryptographic expertise, technical leadership, and practical machine-learning experience to design and operate adaptive security systems for key management, PKI, and secrets infrastructure at SaaS scale.

Requirements

At least 8 years of professional software engineering experience.
Production-scale experience with Java, Go, or a comparable strongly typed language.
Strong computer science fundamentals, including data structures, algorithms, object-oriented design, and distributed-systems tradeoffs.
Production experience running services on Kubernetes, including deployments, Helm, and CI/CD, in a SaaS or multi-tenant environment.
Working understanding of cryptographic primitives, including symmetric and asymmetric encryption, hashing, digital signatures, and TLS/PKI fundamentals.
Demonstrated security-first engineering habits, including secure coding practices, threat modeling, and disciplined code review.

Nice To Haves

Direct experience in cryptography, PKI, key management, or secrets management, such as certificate lifecycle systems, HSM/KMS integration, or crypto-agility work.
Hands-on AI/ML experience applying techniques to security or operations problems, such as anomaly detection, risk scoring, or log and telemetry analysis, or critically integrating LLM tools into engineering workflows.
Experience in regulated environments, such as FIPS 140-2/3, FedRAMP, or Common Criteria.
Exposure to post-quantum cryptography.
A track record of mentoring engineers and raising a team’s security standards.

Responsibilities

Design, build, and maintain scalable, secure cryptographic services that meet FIPS compliance and regulated-environment requirements.
Architect and operate mission-critical cryptographic services, treating reliability and security as core design constraints.
Own services end to end on Kubernetes in a multi-tenant SaaS environment, including deployment, scaling, on-call duties, and incident response.
Evaluate appropriate applications of AI and machine learning in cryptography and security, distinguishing useful applications from distractions.
Collaborate with product owners, security architects, and platform teams to translate compliance and security requirements into cryptographic frameworks.
Mentor engineers on secure coding, cryptographic pitfalls, and rigorous design reviews.
Stay current on cryptographic advances, including post-quantum readiness, and proactively bring relevant developments to the team.