SlipstreamJobs tracks this role from the company's public career site. Apply directly on the employer's site.
Salary: USD 166,500 - 291,400 / annual
ServiceNow's Platform Security team is seeking a Staff Software Engineer to architect and operate enterprise-scale cryptographic systems integrated with AI-driven detection and reasoning capabilities. This is a hands-on technical leadership role focused on the cryptographic backbone of the ServiceNow SaaS platform, spanning certificate lifecycle management, key management, secrets distribution, and workload identity in a regulated environment.
You will design and maintain high-quality, scalable cryptographic services meeting FIPS compliance requirements. You'll own mission-critical services end-to-end on Kubernetes in a multi-tenant SaaS environment, including deployment, scaling, on-call support, and incident response. Your responsibilities include threat modeling features from a security-first perspective, evaluating where AI/ML legitimately enhances crypto/security systems (anomaly detection in key usage, ML-assisted certificate risk scoring, AI-assisted code review for cryptographic anti-patterns), and collaborating with product owners and security architects to translate compliance requirements into working frameworks.
You will mentor engineers on secure coding practices, cryptographic pitfalls, and design review rigor. You'll stay current on cryptographic advancements, including post-quantum readiness, and bring forward emerging standards before they become compliance deadlines.
This role combines deep cryptographic expertise with machine learning depth and strong technical leadership. You'll work on core, regulated-environment security engineering at scale.
REQUIREMENTS:
- 8+ years of professional software engineering experience building and operating large-scale, production-grade applications and services
- Strong proficiency in Java, Go, Python, Node.js, or other strongly typed programming languages at production scale
- Experience developing modern web applications using React, Angular, or Vue
- Strong computer science fundamentals: data structures, algorithms, object-oriented design, distributed systems tradeoffs
- Experience designing and implementing APIs and service integrations using REST, GraphQL, and modern backend architectures
- Hands-on experience with SQL and NoSQL databases in high-scale, cloud-native environments
- Proven experience building and operating services on Kubernetes (deployments, Helm, CI/CD, observability, multi-tenant SaaS)
- Experience with AWS, Azure, and/or GCP
- Proficiency with Docker, Kubernetes, GitHub Actions, Jenkins, ArgoCD, and infrastructure automation
- Experience with AI-powered developer tools (GitHub Copilot, Cursor, Codeium, or similar)
- Familiarity with integrating and building applications using modern AI and LLM platforms (OpenAI, Anthropic, or comparable APIs)
- Working understanding of core cryptographic primitives: symmetric and asymmetric encryption, hashing, digital signatures, TLS/PKI fundamentals
- Demonstrated security-first engineering habits: secure coding practices, threat modeling, vulnerability management, rigorous code review discipline
PREFERRED:
- Direct experience in cryptography, PKI, key management, secrets management, certificate lifecycle systems, HSM/KMS integration, or crypto-agility work
- Hands-on AI/ML exposure
- Experience applying ML techniques to security/ops problems (anomaly detection, risk scoring, log/telemetry analysis) or critically integrating LLM tooling into engineering workflows
- Experience with regulated environments (FIPS 140-2/3, FedRAMP, common criteria, or similar)
- Exposure to post-quantum cryptography
- Track record mentoring engineers and raising the security bar on a team
