Principal Security Engineer

What you'll do

• Set the multi-year architecture and technical direction for identity, authentication, authorization, PKI, secrets, and device trust.
• Design, build, operate, and improve highly available trust infrastructure; lead design reviews, incident-driven fixes, and safe fleet-wide migrations.
• Mentor senior engineers and coordinate adoption of security systems across engineering, AI platform, infrastructure, and business teams.

What they ask for

• BS Degree in Computer Science or related field.
• 10+ years of experience in software engineering, with deep specialization in cybersecurity.
• Expert knowledge in one or more of identity and access management, Zero Trust architecture, secure systems design, applied cryptography, authorization and policy systems, or agentic/AI security.
• Hands-on experience owning highly available, Tier-1 distributed systems in the critical path of production traffic, including design, operation, and incident response.

Nice to have

• Experience designing or operating Zero Trust architectures at scale, including workload identity, service mesh authentication, policy decision services, device trust, or secretless service-to-service authentication.
• Experience securing AI/agentic systems or managing non-human identity at scale.

Pay

USD $302,000 per year - USD $336,000 per year (base salary, San Francisco); USD $302,000 per year - USD $336,000 per year (base salary, Seattle); USD $302,000 per year - USD $336,000 per year (base salary, Sunnyvale)

Tools

Go, Python, Java, C++, Rust, SPIFFE/SPIRE, OAuth 2.0/OIDC, SAML

AI focus

Extend identity and authorization to AI agents as first-class principals, including agent identity and attestation, delegated authorization, risk-adaptive controls, and attribution of agent actions to an accountable owner.