Employee Applicant Privacy Notice
Who we are:
Shape a brighter financial future with us.
Together with our members, we’re changing the way people think about and interact with personal finance.
We’re a next-generation financial services company and national bank using innovative, mobile-first technology to help our millions of members reach their goals. The industry is going through an unprecedented transformation, and we’re at the forefront. We’re proud to come to work every day knowing that what we do has a direct impact on people’s lives, with our core values guiding us every step of the way. Join us to invest in yourself, your career, and the financial world.
The role
We are looking for a Staff Cryptography Engineer to help lead SoFi’s enterprise readiness for post-quantum cryptography and long-term cryptographic resilience. This role sits within our Security Assurance organization and will partner closely with security, engineering, infrastructure, product, and business stakeholders to assess, modernize, and strengthen cryptographic controls across the enterprise.
This is a highly cross-functional and strategic role. The ideal candidate brings deep applied cryptography expertise, strong engineering and architecture judgment, and the ability to drive complex security initiatives in ambiguous environments. You will help build SoFi’s cryptographic inventory, identify where cryptographic keys, protocols, algorithms, certificates, and libraries are used, and guide teams through the implementation of quantum-resistant and crypto-agile solutions.
What you’ll do
- Lead efforts to assess and improve SoFi’s enterprise cryptographic posture, with a focus on post-quantum cryptography preparedness and crypto-agility.
- Build and maintain an inventory of cryptographic assets, including keys, certificates, algorithms, protocols, libraries, services, and business-critical systems.
- Partner with product, engineering, infrastructure, cloud, and security teams to identify cryptographic dependencies and prioritize remediation or migration needs.
- Provide deep technical guidance on SSL/TLS, PKI, certificates, key management, encryption, cryptographic algorithms, and secure protocol usage.
- Define and document cryptographic standards, design patterns, review gates, and implementation guidance for engineering and product teams.
- Evaluate current and future cryptographic risks, including quantum-resistant key migration, algorithm deprecation, certificate lifecycle management, and insecure implementation patterns.
- Review product and platform architecture designs to identify cryptographic risks and recommend practical, scalable security improvements.
- Translate complex cryptographic concepts into clear guidance, roadmaps, and decision points for technical and non-technical stakeholders.
- Drive cross-functional execution across teams without direct authority, ensuring ownership, timelines, and risk decisions are clearly documented.
- Support security assurance activities, including threat modeling, architecture reviews, control validation, and post-review follow-through.
- Stay current on post-quantum cryptography developments, industry standards, and emerging security guidance, and translate relevant changes into actionable plans for SoFi.
What you’ll need
- 8+ years of experience in security engineering, product security, applied cryptography, security architecture, infrastructure security, or a related technical security discipline.
- Experience with post-quantum cryptography, crypto-agility, or cryptographic migration planning.
- Deep hands-on expertise in applied cryptography, including cryptographic algorithms, secure protocol design (e.g., SSL/TLS, mTLS, M2M), and the practical implementation and lifecycle management of enterprise-grade solutions such as HSMs, KMS, secrets management, and PKI programs.
- Experience assessing or designing cryptographic controls in production engineering environments, including cloud, distributed systems, services, APIs, or enterprise platforms.
- Strong understanding of public cloud environments and how cryptographic controls are implemented across infrastructure, applications, services, and data flows.
- Ability to review technical architecture and identify practical cryptographic risks, implementation gaps, and secure design alternatives.
- Experience creating or driving security standards, technical guidance, inventories, roadmaps, or enterprise-wide security initiatives.
- Strong communication skills, with the ability to explain complex cryptographic concepts to engineering, product, security, risk, and business stakeholders.
- Demonstrated ability to operate independently in ambiguous problem spaces and drive cross-functional work from discovery through execution.
- Strong project ownership and prioritization skills, including the ability to identify stakeholders, define milestones, document decisions, and manage follow-through.
- Bachelor’s degree in computer science, cybersecurity, engineering, mathematics, or a related field, or equivalent practical experience.
Nice to have
- Experience in financial services, fintech, banking, payments, cloud, SaaS, or other highly regulated technical environments.
- Familiarity with NIST, FIPS, PCI, or other security and cryptographic standards relevant to financial services.
- Experience partnering with product security, application security, infrastructure, platform engineering, or enterprise architecture teams.
- Experience building or leading cryptographic inventories, key-management programs, or encryption modernization efforts.
- Advanced degree or specialized training in cryptography, computer science, mathematics, or information security.
- Experience mentoring security engineers or influencing security architecture practices across multiple teams.
Skills Required
- 8+ years experience in security engineering, product security, applied cryptography, security architecture, infrastructure security, or related discipline
- Experience with post-quantum cryptography, crypto-agility, or cryptographic migration planning
- Deep hands-on expertise in applied cryptography, including algorithms and secure protocol design (e.g., SSL/TLS, mTLS, M2M)
- Practical experience with enterprise-grade key management and cryptographic infrastructure (HSMs, KMS, secrets management, PKI programs)
- Experience assessing or designing cryptographic controls in production engineering environments (cloud, distributed systems, services, APIs)
- Strong understanding of public cloud environments and cryptographic control implementation across infrastructure, applications, and data flows
- Ability to review technical architecture and identify cryptographic risks and implementation gaps
- Experience creating or driving security standards, technical guidance, inventories, roadmaps, or enterprise-wide security initiatives
- Strong communication skills to explain complex cryptographic concepts to technical and non-technical stakeholders
- Bachelor's degree in computer science, cybersecurity, engineering, mathematics, or related field, or equivalent practical experience
- Experience in financial services, fintech, banking, payments, cloud, SaaS, or other highly regulated technical environments
- Familiarity with NIST, FIPS, PCI, or other relevant security and cryptographic standards
- Experience building or leading cryptographic inventories, key-management programs, or encryption modernization efforts
- Advanced degree or specialized training in cryptography, computer science, mathematics, or information security
- Experience mentoring security engineers or influencing security architecture practices across multiple teams
What the Team is Saying
What We Do
SoFi wasn’t built to be a bank. Or a technology company. We were built for one mission: help people achieve financial independence so they can realize their ambitions. Redefining an entire industry isn’t easy work—and it’s not for the faint of heart. It takes a certain kind of team. People with diverse perspectives and expertise, united by a common sense of purpose. People willing to challenge assumptions but always do the right thing. People proving that innovation and responsibility don’t have to compete, but can come together to create something truly unconventional in the world. For the last eight years, we’ve been charting this new path forward. We call it The SoFi Way. At SoFi, we don’t just talk about culture: we live it. The SoFi Way is how we show up every day, how we make decisions, and how we build for our members, clients, and each other.
Why Work With Us
Together with our members, we’re changing the way people think about and interact with personal finance. We’re a next-generation Fintech company using innovative, mobile-first technology to help our members reach their goals. The industry is going through an unprecedented transformation, and we’re at the forefront.
Gallery
SoFi Offices
Hybrid Workspace
Employees engage in a combination of remote and on-site work.
For the majority of our workforce who work on a hybrid schedule, the in-office requirement is a handful of days per month!
