Principal Engineer, CoreWeave

• 8+ years of experience building and operating distributed backend systems in production, including ownership of reliability and security outcomes for critical services
• Deep experience with encryption at rest and key management systems, including envelope encryption patterns, key hierarchies and secure key lifecycle management
• Hands-on experience integrating with at least one major KMS or secrets manager (e.g., AWS KMS, HashiCorp Vault, Azure Key Vault, GCP KMS, HSMs), including designing APIs and workflows around those systems
• Strong proficiency in a systems programming language such as Go (preferred) or Rust, with experience building networked services (gRPC / REST) in a Linux / Kubernetes environment
• Solid understanding of applied cryptography concepts relevant to data‑at‑rest protection (AES‑GCM/CTR, key wrapping, KDFs, randomness requirements, envelope encryption, and key separation) with the ability to reason about threat models and failure modes with Security partners
• Experience designing and operating multi‑tenant services with strong isolation and authorization semantics across customers and internal tenants
• Demonstrated track record of leading cross‑team technical initiatives, driving projects from problem statement through rollout, alignment, and operational readiness
• Strong operational experience defining SLIs / SLOs, building dashboards and alerts, and partnering with SRE / Production Engineering on incident response and post‑incident improvement
• Excellent written and verbal communication skills with the ability to produce clear, opinionated design docs that influence Senior Engineers, PMs, and Security stakeholders through context setting and sound technical judgment
• We believe in investing in our people, and value candidates who can bring their own diversified experiences to our teams – even if you aren't a 100% skill or experience match
• You care deeply about getting the cryptographic and operational details right, and you’re comfortable saying “no” to shortcuts that weaken security or key custody guarantees
• You’re excited by the challenge of building foundational security primitives that other product teams and large enterprises will build on for years
• You enjoy working at the intersection between Platform, Storage, IAM, and Security Engineering, and you can translate between those domains without losing the plot
• You’re skilled at turning complex requirements for highly regulated customers into simple, reliable, well‑documented APIs and workflows
• You’re comfortable operating in a fast‑moving environment, iterating quickly while still holding a high bar for design review, testing, and safe rollout of security‑sensitive changes

Desirable

• CoreWeave is seeking a Staff or Principal Engineer for our Security Products team to lead the technical direction and implementation of encryption and key lifecycle management
• In this role, you’ll design and evolve the key lifecycle management, encryption control planes, algorithm/library selection, and systems integrations that allow CoreWeave customers to deploy sensitive, high security AI workloads and data
• You’ll partner closely with teams across CoreWeave to develop customer-driven cryptography technology
• Your day‑to‑day will blend hands‑on system design and coding with cross‑team technical leadership, design reviews, and roadmap shaping for Security Products
• Lead the design and evolution of encryption and key lifecycle management products
• Manage encryption and cryptography technology development for services within our Cloud Platform, particularly those for high security and highly regulated customers
• Design and build deep integrations between our Cloud Platform and external key sources (eg, HashiCorp Vault, AWS KMS, HSMs)
• Collaborate with other product engineering teams to support the safe use of multicloud key management technology
• Partner with IAM to define unified authorization patterns and policy models for key management APIs with consistent semantics across the resource hierarchy
• Establish SLIs / SLOs for Remote Key Encryption (RKE) and related services, including availability, latency, and durability guarantees for key retrieval and encryption operations
• Partner with the Security Engineering team on threat modeling and corporate strategy to enable the most sensitive AI workloads in the world to be deployed on CoreWeave's infrastructure
• Author and review detailed technical designs and RFCs for new RKE capabilities, mentor other engineers on the team, and provide technical leadership across Security Products and adjacent organizations