The Staff Engineer in Platform Security Engineering at GEICO will focus on the design, implementation, and maintenance of an Encryption and Tokenization platform to protect sensitive data. This role requires collaboration with engineers and partner teams to enhance existing systems and solve complex technical problems. The engineer will lead the development of secure data protection capabilities and ensure compliance with company policies and regulatory requirements. The position emphasizes technical mentorship and the integration of encryption solutions to support business goals.

• Strong understanding of cryptographic encryption, tokenization, and Key Management Systems (KMS).
• Experience designing and implementing secure, scalable solutions for data at rest encryption.
• Strong software engineering skills, with experience building production grade services, preferably in Go.
• Working knowledge of key management technologies and libraries, such as Google Tink and OpenSSL.
• Experience operating stateful systems such as PostgreSQL.
• Proven problem-solving skills with a security first mindset.
• Experience applying site reliability engineering (SRE) practices.
• Experience building and maintaining CI/CD pipelines and infrastructure as code.
• Strong communication skills to explain technical concepts clearly.
• Familiarity with hardware security modules (HSMs) and cryptography standards.
• 6+ years of experience in security or software engineering with a focus on encryption, tokenization, key management, or cryptography.
• 3+ years of experience contributing to system design and architecture.
• Experience working with open source security or cryptography frameworks.
• Experience building and operating systems in cloud environments.

• Lead the design, development, and evolution of encryption, tokenization, and key management solutions.
• Drive hands-on implementation of secure data protection capabilities.
• Ensure the quality, reliability, and operational excellence of encryption and tokenization services.
• Partner closely with compliance, security, data governance, and application teams.
• Contribute to architectural decisions by proposing scalable designs for key management systems.
• Apply knowledge of modern cryptography trends to improve platform security.
• Provide technical mentorship and guidance to engineers on the team.
• Collaborate with product and engineering stakeholders to integrate encryption solutions.
• Identify opportunities to improve performance, cost efficiency, and developer experience.