Principal Engineer, Trusted Platforms and Security
- linkCopy link
- emailEmail a friend
- Health, dental, vision, life, disability insurance
- Retirement Benefits: 401(k) with company match
- Paid Time Off: 20 days of vacation per year, accruing at a rate of 6.15 hours per pay period for the first five years of employment
- Sick Time: 40 hours/year (increased to 69 hours/year for Seattle) including 5 discretionary sick days per instance
- Maternity Leave (Short-Term Disability + Baby Bonding): 28-30 weeks
- Baby Bonding Leave: 18 weeks
- Holidays: 13 paid days per year
Minimum qualifications:
- Bachelor's degree in Computer Science, Cryptography, Mathematics, or other relevant engineering discipline, or equivalent practical experience.
- 15 years of experience as a software engineering leader.
- Experience in large-scale infrastructure, public key infrastructure, and security.
Preferred qualifications:
- Demonstrated success leading initiatives and developing policies or thought leadership in regulated, high visibility domains.
- Proven track record of cross-functional leadership.
- Proven track record of an innovative mindset and excellent execution.
- Ability to build and drive technical roadmap and design with a broader engineering organization.
- Vigilant about technical trends and ability to quickly adapt to new AI/ML technologies and apply to consumer or enterprise applications.
About the job
As Principal Engineer, you will collaborate to create, oversee, and support technical vision and strategy for three product areas dedicated to providing 1P and 3P security offerings and infrastructure. This includes leading the evolution of Google Trust Services (GTS), the world's second largest public Certificate Authority (CA) protecting more page views than any other CA, and our Certificate Authority Service (CAS), which provides a turnkey solution for the creation and management of highly scalable, secure, and compliant private CAs. You will also help steer the long-term direction of our Production Public Key Infrastructure (PKI), providing digital certificates to all internal infrastructure services including those responsible for securing high-performance Remote Procedure Call (RPC), RDMA, cloud networking, and other traffic along with hardware identity. This role requires a balance of building next-generation product offerings while iteratively hardening existing infrastructure, ensuring they remain compliant, resilient, and reliable.You won't just react to problems; you will anticipate them. You will navigate a vast and complex security landscape, synthesizing signals from across the company and PKI ecosystem to identify high-impact initiatives to prioritize. Your leadership will ensure that our engineering efforts are always directed toward the most important priorities for Google and our users.
Google Cloud accelerates every organization’s ability to digitally transform its business and industry. We deliver enterprise-grade solutions that leverage Google’s cutting-edge technology, and tools that help developers build more sustainably. Customers in more than 200 countries and territories turn to Google Cloud as their trusted partner to enable growth and solve their most critical business problems.
The US base salary range for this full-time position is $307,000-$427,000 + bonus + equity + benefits. Our salary ranges are determined by role, level, and location. Within the range, individual pay is determined by work location and additional factors, including job-related skills, experience, and relevant education or training. Your recruiter can share more about the specific salary range for your preferred location during the hiring process.
Please note that the compensation details listed in US role postings reflect the base salary only, and do not include bonus, equity, or benefits. Learn more about benefits at Google.
Responsibilities
- Provide architecture and technical direction by being an expert in security, GenAI, and cloud application management; consult on OKRs across platform teams, review designs, participate in (and help to resolve) technical discussions, and drive high quality extensible engineering investments for large models.
- Strategize and create technical roadmaps for infrastructure security solutions for emerging technologies such as agents and LLMs.
- Work with product areas and influence stakeholders across the organization to build joint roadmaps and strong security narratives for relevant Google Cloud AI efforts.
- Be able to co-steer the architecture and technical direction of critical security products and infrastructure including Google’s Public and Private CAs, and secure production identities and root keys, balancing the launch of new capabilities with the continuous iterative improvement of existing infrastructure.
Information collected and processed as part of your Google Careers profile, and any job applications you choose to submit is subject to Google's Applicant and Candidate Privacy Policy.
Google is proud to be an equal opportunity and affirmative action employer. We are committed to building a workforce that is representative of the users we serve, creating a culture of belonging, and providing an equal employment opportunity regardless of race, creed, color, religion, gender, sexual orientation, gender identity/expression, national origin, disability, age, genetic information, veteran status, marital status, pregnancy or related condition (including breastfeeding), expecting or parents-to-be, criminal histories consistent with legal requirements, or any other basis protected by law. See also Google's EEO Policy, Know your rights: workplace discrimination is illegal, Belonging at Google, and How we hire.
If you have a need that requires accommodation, please let us know by completing our Accommodations for Applicants form.
Google is a global company and, in order to facilitate efficient collaboration and communication globally, English proficiency is a requirement for all roles unless stated otherwise in the job posting.
To all recruitment agencies: Google does not accept agency resumes. Please do not forward resumes to our jobs alias, Google employees, or any other organization location. Google is not responsible for any fees related to unsolicited resumes.