Senior Software Security Engineer, Infrastructure

Company Description
Block is one company built from many blocks, all united by the same purpose of economic empowerment. The blocks that form our foundational teams - People, Finance, Counsel, Hardware, Information Security, Platform Infrastructure Engineering, and more - provide support and guidance at the corporate level. They work across business groups and around the globe, spanning time zones and disciplines to develop inclusive People policies, forecast finances, give legal counsel, safeguard systems, nurture new initiatives, and more. Every challenge creates possibilities, and we need different perspectives to see them all. Bring yours to Block.
Job Description
The Block Security team works with other teams at Block to build world-class products for both customers and employees. Our ultimate goal is to ensure that every single experience with Block is simple, secure, and safe.
Block's Cryptographic Identity engineering team is responsible for some of the company's most critical systems. We help protect our customers' most sensitive data by defining, creating, and distributing secure, verifiable credentials for all entities within Block.
You will:

• Design, implement, and maintain security-oriented software that makes it easier for non-security engineers to build secure products.
• Own the delivery and success of critical identity and PKI services and infrastructure.
• Collaborate with many teams and functions across Block to make technical, design, strategy, and product decisions.
• Act as an internal security subject matter expert, advocating for better security practices throughout Block.
• Grow your career in an engaged and innovative engineering community that ships amazing products.
• Work in any Block office location, or work remotely in the USA or Canada. Occasional travel may be required.

Qualifications
You have:

• 8+ years of relevant experience
• Demonstrated success at building secure systems with broad company impact.
• Experience designing, implementing, deploying, and monitoring highly-available, critical production systems.
• Experience with applied cryptography or securing cloud platforms.
• A strong desire to perform and grow as a security engineer and educate other engineers.

Some of the technologies we use and teach:

• Go, Rust, Java
• AWS/GCP/Block-owned datacenter
• SPIFFE
• Service Mesh, Envoy
• AWS Lambda, Fargate, Kubernetes, Docker

We're active contributors to open-source! Some of the projects we developed or maintain include:

• Certigo : A utility to examine and validate certificates in a variety of formats.
• Certstrap : Tools to bootstrap CAs, certificate requests, and signed certificates.
• Sharkey : a service for managing certificates for use by OpenSSH.
• Ghostunnel : TLS proxy with mutual authentication for securing non-TLS services.
• Go JOSE : An implementation of JOSE standards (JWE, JWS, JWT) in Go (and in JavaScript , too).
• Keywhiz : a secrets distribution service and its client Keysync .

Qualifications
You have:

• 8+ years of relevant experience
• Demonstrated success at building secure systems with broad company impact.
• Experience designing, implementing, deploying, and monitoring highly-available, critical production systems.
• Experience with applied cryptography or securing cloud platforms.
• A strong desire to perform and grow as a security engineer and educate other engineers.

Some of the technologies we use and teach:

• Go, Rust, Java
• AWS/GCP/Block-owned datacenter
• SPIFFE
• Service Mesh, Envoy
• AWS Lambda, Fargate, Kubernetes, Docker

We're active contributors to open-source! Some of the projects we developed or maintain include:

• Certigo : A utility to examine and validate certificates in a variety of formats.
• Certstrap : Tools to bootstrap CAs, certificate requests, and signed certificates.
• Sharkey : a service for managing certificates for use by OpenSSH.
• Ghostunnel : TLS proxy with mutual authentication for securing non-TLS services.
• Go JOSE : An implementation of JOSE standards (JWE, JWS, JWT) in Go (and in JavaScript , too).
• Keywhiz : a secrets distribution service and its client Keysync .