Base Salary
$248k - $282k/yr
Responsibilities
- Build encryption and key-management systems supporting hosted, VPC, and on-premises deployments.
- Develop controls for detecting, transforming, and safely handling PHI, PII, and other sensitive data across workflows, connectors, model calls, logs, and storage.
- Secure customer-provided credentials and tokens from storage and access control through runtime use.
- Improve tenant isolation, signing and verification, session and token handling, and service-to-service authentication.
- Create shared Python services, libraries, and APIs for consistent security-critical behavior.
- Lead migrations, compatibility periods, staged rollouts, observability, recovery, and rollback for live systems.
- Own technical work end to end from investigation and design through implementation and production operation.
Requirements
- 4+ years of experience building and operating production backend systems.
- Strong professional experience with Python in a substantial production codebase.
- Hands-on experience implementing and operating security-critical product systems, including code that enforces their guarantees.
- Meaningful depth in encryption and key management, signing/authentication/session/token infrastructure, multi-tenant isolation, sensitive-data processing, or secure customer-credential handling.
- Practical knowledge of applied cryptography.
- Experience changing critical systems without disrupting existing customers or making stored data inaccessible.
- Strong judgment regarding trust boundaries, failure modes, and consequences of compromise.
- Ability to take ambiguous technical problems from investigation through production rollout.
- Prior healthcare experience is helpful but not required.
- Bonus qualifications include HashiCorp Vault, cloud KMS products, HSMs, envelope encryption, key rotation, PHI/PII processing, PKI, certificate systems, cryptographic signing, sensitive-data SaaS, regulated industries, self-hosted/VPC/on-premises/air-gapped deployments, AI-agent or LLM architectures, and startup experience.
Benefits
- The role is embedded in StackAI’s Core Engineering team with access to Asana’s established security and infrastructure teams when work crosses application and platform boundaries.
About StackAI
Enterprise AI trusted by Finance, Risk and Operations teams. Power your AI transformation strategy with StackAI. Backed by YC and Google. We are a small dedicated team of insanely talented individuals relentlessly pushing the boundaries of what’s possible with AI. We are pioneering a new horizontal platform allowing anyone to build and deploy AI agents and automations. Companies across industries—including healthcare, legal, financial, logistics, and defense—use StackAI make their organizations faster, more efficient, and scalable, leveraging the power of AI. With strong backing from YC and Google, we're set to double our team size in 2026. This is an exciting time to join if you want to build a category-defining product with strong customer momentum. We're looking for user-centric, craft-focused, creative minds who work hard but don't take themselves too seriously. We're ambitious yet pragmatic. We move fast, but care about the important details. We're hiring for a range of roles. Reach out if you'd like to learn more!