About this opportunity
Jobtailor lists this Senior Software Engineer – Encryption, PHI opportunity in san francisco, California. Review the employer’s description below for duties, qualifications and application requirements.
Job description
Design and evolve encryption and key-management systems for hosted, VPC, and on-premises deployments
Build controls to detect, transform, and safely handle PHI, PII, and other sensitive data across workflows, connectors, model calls, logs, and storage
Protect customer credentials and tokens from storage and access control through runtime use
Improve tenant isolation, signing and verification, session and token handling, and service-to-service authentication
Build Python services, libraries, and APIs that standardize security-critical behavior
Plan and execute migrations, compatibility periods, staged rollouts, observability, recovery, and rollback
Define technical approaches, write production code, plan migrations, and remain accountable for production behavior
Take projects from investigation and design through implementation, migration, rollout, and operation
Collaborate with established security and infrastructure teams when problems cross application and platform boundaries
Requirements
4+ years of experience building and operating production backend systems
Strong professional experience with Python in a substantial production codebase
Hands-on experience implementing and operating security-critical product systems, including the code that enforces their guarantees
Depth in at least one of: encryption and key management; signing, authentication, sessions, or token infrastructure; multi-tenant isolation; sensitive-data processing; secure storage and runtime use of customer credentials
Practical knowledge of applied cryptography
Experience changing critical systems without disrupting existing customers or making previously stored data inaccessible
Strong judgment around trust boundaries, failure modes, and the consequences of compromise
Ability to take an ambiguous technical problem from investigation through production rollout
Prior healthcare experience is helpful but not required
Bonus: experience with HashiCorp Vault, cloud KMS products, HSMs, envelope encryption, or key rotation
Bonus: PHI or PII detection, redaction, pseudonymization, or tokenization
Bonus: PKI, certificate systems, or cryptographic signing
Bonus: multi-tenant SaaS products handling sensitive customer data
Bonus: experience in healthcare, payments, identity, financial infrastructure, or another security-sensitive domain
Bonus: self-hosted, VPC, on-premises, or air-gapped deployments
Bonus: AI-agent, LLM, or connector-based application architecture
Bonus: startup or growth-stage product experience
Core Competencies
Demonstrates expertise in designing and implementing encryption and key-management systems, with a strong focus on security-critical product systems and sensitive data processing. Proficient in Python development for production environments, ensuring robust handling of customer credentials and compliance with security standards.
Highest-signal resume keywords
Python Development
Encryption And Key Management
Sensitive Data Processing
Applied Cryptography
Security-Critical Systems
Hard Skills
Encryption
Key Management
Token Infrastructure
Multi-Tenant Isolation
Sensitive Data Handling
Production Code Development
Security Controls Implementation
Data Migration Planning
Runtime Security Practices
Observability
Soft Skills
Strong Judgment
Problem-Solving
Collaboration
Industry Keywords
PHI
PII
Healthcare
Payments
Financial Infrastructure
Security-Sensitive Domains
SaaS Products
Tools & Technologies
HashiCorp Vault
Cloud KMS
HSMs
PKI
Certificate Systems
#J-18808-Ljbffr
Worksite address
san francisco, CA, 94199, US
Who can apply
Review the original listing for work authorization, qualifications and employer requirements.