[Hiring] Senior Platform Engineer (Encryption & Data Security) @Recorded Future

Role Description

The Senior Platform Engineer (Encryption & Data Security) is responsible for leading the design, implementation, and evolution of platform capabilities that ensure secure data handling across the organization. This role goes beyond implementation—driving technical direction, shaping best practices, and enabling development teams to build and operate secure systems by default. The focus includes encryption strategy, certificate lifecycle management, and data classification/labeling at scale.

• Lead the design, implementation, and continuous improvement of secure infrastructure services supporting 30+ development teams.
• Own and evolve end-to-end encryption strategies across:
  • Service-to-service communication
  • Data at rest
  • Data in transit
• Drive the design and adoption of automated certificate lifecycle management (including rotation and revocation).
• Define and implement platform-wide approaches to data classification and labeling.
• Act as a technical leader and subject matter expert in encryption and data security across the organization.
• Build and maintain infrastructure as code using GitOps principles, setting standards for others to follow.
• Guide and support teams in securely integrating with platform services and adopting best practices.
• Lead incident response and complex troubleshooting across infrastructure, networking, and distributed systems.
• Identify and drive improvements in reliability, scalability, and security across the platform.
• Contribute to architectural decisions and long-term platform strategy.
• Mentor other engineers and elevate engineering standards across the team.
• Participate in on-call rotations and help evolve operational excellence practices.

Qualifications

• Deep expertise in TLS, PKI, certificate chains, and certificate lifecycle management.
• Strong understanding of encryption fundamentals (symmetric/asymmetric cryptography, key management, rotation strategies).
• Proven experience designing and operating secure systems at scale.
• Strong experience in platform engineering, site reliability engineering, or similar roles.
• Proficiency in at least one programming language and ability to write production-grade code.
• Strong experience with Infrastructure as Code and GitOps-based workflows.
• Deep expertise in AWS, including services such as EC2, S3, VPC, EKS, ALB/ELB, and Transit Gateway.
• Strong Linux engineering skills, including networking, storage, and OS fundamentals.
• Solid understanding of network security and experience with CDNs.
• Experience working with at least one database, Elasticsearch or MongoDB preferred.
• Experience working with distributed systems and debugging complex production issues.
• Ability to take ownership of ambiguous problems and drive them to resolution.
• Strong communication skills and ability to influence across teams.

Preferred Qualifications

• Experience working within compliance and regulatory frameworks (e.g., CMMC, FedRAMP).
• Experience with large-scale distributed systems and microservices architectures.
• Familiarity with languages such as Go or Java.
• Experience with messaging systems such as RabbitMQ or Kafka.
• Experience implementing or operating automated certificate rotation systems.
• Knowledge of cloud security best practices and security architecture.
• AWS certifications.

Benefits

• The base salary range for this full-time position is $152,000- $228,500.
• This position may be eligible for incentive compensation, equity, and medical, dental, vision, life insurance, and 401K.