Distinguished Software Engineer Cryptography and Data Protection (REMOTE)

Position Summary
GEICO is seeking an experienced Distinguished Engineer to solve complex cryptography-related challenges. You will help drive our insurance business transformation as we redefine experiences for our customers.

Position Description
Our Distinguished Engineer works with our Sr Staff, Staff, and Sr. Engineers to innovate and build new systems, improve, and enhance existing systems as well as identify new opportunities to apply your knowledge to solve critical problems. You will lead the strategy and execution of a technical roadmap that will increase the velocity of delivering products and unlock new engineering capabilities. You will lead and drive design, implementation, and maintenance of a robust public key infrastructure (PKI) framework and cryptography solutions. The ideal candidate has deep technical expertise ensuring secure authentication and communication across the organization.

Position Responsibilities
As a Distinguished Engineer, you will:

• Focus on multiple areas and provide technical and thought leadership to the enterprise

• Develop and execute technical software development strategy for a variety of domains

• Accountable for the quality, usability, and performance of the solutions

• Influence and educate leadership at all levels

• Consistently share best practices and improve processes within and across teams

• Analyze cost and forecast, incorporating them into business plans

• Determine and support resource requirements, evaluate operational processes, measure outcomes to ensure desired results, and demonstrate adaptability and sponsoring continuous learning

• Oversee efficient certificate lifecycle management, including issuance, renewal, and revocation, while optimizing overall processes

• Collaborate with application team to implement tokenization solutions that reduce sensitive data exposure, thereby enhancing data security and minimizing the risk of unauthorized access

• Stay at the forefront of emerging cryptography trends, technologies, and best practices, and apply this knowledge to enhance GEICO’s data protection strategies

• Provide technical guidance and mentorship to the team, fostering a culture of innovation, collaboration, and continuous improvements

• Collaborate with cross-functional teams, including security, compliance, and application teams to ensure the seamless integration and alignment of solutions with organizational goals

• Build resilient and scalable architecture, driving innovation and cost efficiency

Qualifications

• Experience partnering with engineering teams and transferring research to production

• Experience with continuous delivery and infrastructure as code

• In-depth knowledge of CS data structures and algorithms

• Experience solving analytical problems with quantitative approaches

• Ability to excel in a fast-paced, startup-like environment

• Knowledge of developer tooling across the software development life cycle (task management, source code, building, deployment, operations, real-time communication)

• Experience with micro-services oriented architecture and extensible REST APIs

• Experience building the architecture and design (architecture, design patterns, reliability, and scaling) of new and current systems

• Fluency in DevOps Concepts, Cloud Architecture, and Azure DevOps Operational Framework

• Experience in leveraging PowerShell scripting

• Experience in existing Operational Portals such as Azure Portal

• In depth knowledge of Datacenter structure, capabilities, and offerings, including the Azure platform, and its native services including the Azure platform and its native services

• Experience in security protocols and products: Understanding of Active Directory, Windows Authentication, SAML, OAuth

• Experience in Azure Network (Subscription, Security zoning, etc.)

• Fluency and specialization with at least one modern language such as Java, Go, or Rust

• In depth expertise in cryptographic protocols, digital certificates, and encryption standards such as X.509, Transport Layer Security (TLS), and Advanced Encryption Standard (AES)

• Demonstrated ability to design and implement resilient, scalable, and efficient solutions

• Strong problem-solving abilities and a proactive approach to identifying and mitigating security risks and vulnerabilities

• Excellent communication skills, able to communicate complete technical concepts to technical and non-technical stakeholders

• One or more of the following certifications are highly