Principal Security Engineer, Security Platform

Who are we?

A place where tech thinkers and future builders turn bold ideas into breakthrough experiences, we welcome your unique perspective.

Help us challenge assumptions, uncover bias, and remove barriers—because progress starts with fresh ideas. You’ll find belonging, purpose, and a team that welcomes you—because when you feel valued, you’re empowered to do your best work.

Job Summary

The Digital Information Security Engineering team is seeking a deeply technical Area Tech Lead (ATL) to join our team and own the end-to-end technical strategy and architecture for the Security Operating System—a foundational platform that powers security services, automation, and data-driven decision-making across the enterprise. In this ATL capacity, you will define the long-term technical roadmap for the security platform, drive architectural alignment across multiple engineering teams, and partner with engineering and business leadership to deliver measurable outcomes for the organization.

Responsibilities

• Design and implement core security platform services that expose reliable, well-instrumented interfaces that are consumed by customers of the Security Platform

• Translate security and product requirements into architecture and code—from proof of concept to hardened, production-ready services

• Own the technical strategy and multi-year roadmap for the Security OS area; break it into credible incremental milestones that can be delegated to domain leads for execution

• Serve as the technical go-to leader for architecture, platform design, and escalations within the area; document rationale and ensure teams have clear implementation paths

• Partner with engineering managers, product leaders, and security executives as peers to align technical direction with business outcomes; represent the area in cross-organizational architecture forums

• Provide technical oversight across the delivery lifecycle—architecture, quality standards, deployment practices, and operational readiness—while delegating execution to engineering teams

• Design automation-first workflows, integrating security services and telemetry from diverse tools and data sources

• Design and build integrations, plugins, and hooks across the security ecosystem (IAM, app sec, endpoints, cloud, data protection)

• Evaluate and adopt emerging technologies, including AI-driven and open-source security tooling, where they add measurable value

• Define and evolve service APIs, ensuring they are scalable, secure, and aligned with platform capabilities

• Ensure platform reliability by designing for SLA/SLO compliance, observability, and fault tolerance

• Proactively identify technical risks and bottlenecks, driving resolution before they impact delivery or reliability

Technical Leadership Characteristics

• Lead through technical strategy, architectural clarity, and cross-team decision-making; serve as a thought leader whose influence spans multiple teams and major initiatives

• Navigate ambiguity with minimal guidance; build cross-team technical agreement and unblock execution through pragmatism and credible roadmaps

• Influence cross-functional teams by clearly articulating tradeoffs, constraints, and long-term impact

• Set a high bar for engineering rigor, security design, and operational excellence.

• Anticipate where the security landscape is headed and build platform capabilities ahead of demand

• Collaborate with business and execution executives as peers, driving shared ownership of problems and solutions

Qualifications

• 8+ years of hands-on experience in security engineering, platform engineering, or secure software development

• Strong grounding in security fundamentals: IAM, application security, data protection, credential management, endpoint and cloud security

• Deep experience designing and delivering RESTful APIs and service-based architectures

• Practical expertise with containers, orchestration, and infrastructure abstractions (Docker, Kubernetes, API gateways, service meshes)

• Strong programming skills in Python, Java, C++, or similar (polyglot experience is a plus)

• Hands-on experience with CI/CD pipelines (e.g., GitHub Actions) and modern DevSecOps practices

• Cloud-native delivery experience on AWS, Azure, and/or GCP