Principal Engineer, Trusted Platforms and Security

In accordance with Washington state law, we are highlighting our comprehensive benefits package, which is available to all eligible US based employees. Benefits for this role include:

• Health, dental, vision, life, disability insurance

• Retirement Benefits: 401(k) with company match

• Paid Time Off: 20 days of vacation per year, accruing at a rate of 6.15 hours per pay period for the first five years of employment

• Sick Time: 40 hours/year (increased to 69 hours/year for Seattle) including 5 discretionary sick days per instance

• Maternity Leave (Short-Term Disability + Baby Bonding): 28-30 weeks

• Baby Bonding Leave: 18 weeks

• Holidays: 13 paid days per year

Note: By applying to this position you will have an opportunity to share your preferred working location from the following: Kirkland, WA, USA; Cambridge, MA, USA; New York, NY, USA; Sunnyvale, CA, USA.

Minimum qualifications:

• Bachelor's degree in Computer Science, Cryptography, Mathematics, or other relevant engineering discipline, or equivalent practical experience.

• 15 years of experience as a software engineering leader.

• Experience in large-scale infrastructure, public key infrastructure, and security.

Preferred qualifications:

• Demonstrated success leading initiatives and developing policies or thought leadership in regulated, high visibility domains.

• Proven track record of cross-functional leadership.

• Proven track record of an innovative mindset and excellent execution.

• Ability to build and drive technical roadmap and design with a broader engineering organization.

• Vigilant about technical trends and ability to quickly adapt to new AI/ML technologies and apply to consumer or enterprise applications.

About the job

As Principal Engineer, you will collaborate to create, oversee, and support technical vision and strategy for three product areas dedicated to providing 1P and 3P security offerings and infrastructure. This includes leading the evolution of Google Trust Services (GTS), the world's second largest public Certificate Authority (CA) protecting more page views than any other CA, and our Certificate Authority Service (CAS), which provides a turnkey solution for the creation and management of highly scalable, secure, and compliant private CAs. You will also help steer the long-term direction of our Production Public Key Infrastructure (PKI), providing digital certificates to all internal infrastructure services including those responsible for securing high-performance Remote Procedure Call (RPC), RDMA, cloud networking, and other traffic along with hardware identity. This role requires a balance of building next-generation product offerings while iteratively hardening existing infrastructure, ensuring they remain compliant, resilient, and reliable.

You won't just react to problems; you will anticipate them. You will navigate a vast and complex security landscape, synthesizing signals from across the company and PKI ecosystem to identify high-impact initiatives to prioritize. Your leadership will ensure that our engineering efforts are always directed toward the most important priorities for Google and our users.

Google Cloud accelerates every organization’s ability to digitally transform its business and industry. We deliver enterprise-grade solutions that leverage Google’s cutting-edge technology, and tools that help developers build more sustainably. Customers in more than 200 countries and territories turn to Google Cloud as their trusted partner to enable growth and solve their most critical business problems.

The US base salary range for this full-time position is $307,000-$427,000 + bonus + equity + benefits. Our salary ranges are determined by role, level, and location. Within the range, individual pay is determined by work location and additional factors, including job-related skills, experience, and relevant education or training. Your recruiter can share more about the specific salary range for your preferred location during the hiring process.

Please note that the compensation details listed in US role postings reflect the base salary only, and do not include bonus, equity, or benefits. Learn more about benefits at Google.

Responsibilities

• Provide architecture and technical direction by being an expert in security, GenAI, and cloud application management; consult on OKRs across platform teams, review designs, participate in (and help to resolve) technical discussions, and drive high quality extensible engineering investments for large models.

• Strategize and create technical roadmaps for infrastructure security solutions for emerging technologies such as agents and LLMs.

• Work with product areas and influence stakeholders across the organization to build joint roadmaps and strong security narratives for relevant Google Cloud AI efforts.

• Be able to co-steer the architecture and technical direction of critical security products and infrastructure including Google’s Public and Private CA