Senior Software Engineer - Encryption & PHI

Responsibilities

• Build encryption and key-management systems supporting hosted, VPC, and on-premises deployments.
• Develop controls for detecting, transforming, and safely handling PHI, PII, and other sensitive data across workflows, connectors, model calls, logs, and storage.
• Secure customer-provided credentials and tokens from storage and access control through runtime use.
• Improve tenant isolation, signing and verification, session and token handling, and service-to-service authentication.
• Create shared Python services, libraries, and APIs for consistent security-critical behavior.
• Lead migrations, compatibility periods, staged rollouts, observability, recovery, and rollback for live systems.
• Own technical work end to end from investigation and design through implementation and production operation.

Requirements

• 4+ years of experience building and operating production backend systems.
• Strong professional experience with Python in a substantial production codebase.
• Hands-on experience implementing and operating security-critical product systems, including code that enforces their guarantees.
• Meaningful depth in encryption and key management, signing/authentication/session/token infrastructure, multi-tenant isolation, sensitive-data processing, or secure customer-credential handling.
• Practical knowledge of applied cryptography.
• Experience changing critical systems without disrupting existing customers or making stored data inaccessible.
• Strong judgment regarding trust boundaries, failure modes, and consequences of compromise.
• Ability to take ambiguous technical problems from investigation through production rollout.
• Prior healthcare experience is helpful but not required.
• Bonus qualifications include HashiCorp Vault, cloud KMS products, HSMs, envelope encryption, key rotation, PHI/PII processing, PKI, certificate systems, cryptographic signing, sensitive-data SaaS, regulated industries, self-hosted/VPC/on-premises/air-gapped deployments, AI-agent or LLM architectures, and startup experience.

Benefits

• The role is embedded in StackAI’s Core Engineering team with access to Asana’s established security and infrastructure teams when work crosses application and platform boundaries.