SlipstreamJobs tracks this role from the company's public career site. Apply directly on the employer's site.
Salary: USD 143,200 - 243,400 / annual
ServiceNow's Platform Security team is building foundational security infrastructure and AI-driven detection systems for enterprise-scale operations. The cryptography function owns the cryptographic backbone of the ServiceNow platform, including certificate lifecycle management, key management, secrets distribution, and workload identity for a large-scale multi-tenant SaaS platform operating in regulated environments.
As a Senior Software Engineer in Core Cryptography, you will design and build secure, high-quality cryptographic services for the platform. You'll bring hands-on engineering depth, a security-first mindset, and the ability to apply ML/AI techniques to strengthen how the system detects misuse and anomalies. You will work under the technical direction of staff+ engineers on the team.
Key responsibilities include:
- Design, develop, and maintain high-quality, secure cryptographic services meeting FIPS compliance and regulated-environment requirements
- Build and operate services within the core crypto ecosystem (key management, certificate lifecycle, secrets distribution) with reliability and security as first-class requirements
- Apply ML/statistical techniques to flag anomalous key usage, abnormal secrets access, or unusual certificate request patterns
- Contribute to building inference/detection pipelines that surface cryptographic misuse or compromise indicators in near real time
- Collaborate with product owners, security architects, and engineering teams to translate security and compliance requirements into working code
- Operate services on Kubernetes in a multi-tenant SaaS environment, including deployment, CI/CD, on-call, and incident response
- Write secure code by default: threat-model your own designs, review others' code with the same rigor, catch logic errors and cryptographic anti-patterns
- Stay current on cryptographic advancements, including post-quantum readiness, and bring relevant ideas to the team
REQUIREMENTS:
Basic Qualifications:
- 4+ years professional software engineering experience with Java, Go, or equivalent object-oriented language at production scale
- Advanced knowledge of data structures, algorithms, object-oriented design, design patterns, and performance/scale considerations
- Familiarity with distributed systems concepts (resource isolation, concurrency, scaling execution across shared infrastructure)
- Demonstrated capability to manage multiple projects with material technical risk across teams and processes
- Hands-on experience deploying and operating services on Kubernetes in a SaaS/multi-tenant environment
- Working knowledge of core cryptographic primitives (symmetric/asymmetric encryption, hashing, digital signatures, PKI/TLS fundamentals)
- Demonstrated security-conscious coding habits: secure coding, code review, unit testing, automation
Additional Qualifications:
- Direct experience with cryptography, PKI, key management, or secrets management systems
- Some applied ML/AI exposure (anomaly detection, classification, or critically integrating AI tooling into engineering workflows) over pure research background
- Experience building distributed backend systems (microservices, SQL/NoSQL data stores)
- Exposure to regulated environments (FIPS 140-2/3, FedRAMP, or similar)
