Principal Engineer, Security Products - Cryptography and Key Lifecycle Management

CoreWeave is The Essential Cloud for AI™. Built for pioneers by pioneers, CoreWeave delivers a platform of technology, tools, and teams that enables innovators to build and scale AI with confidence. Trusted by leading AI labs, startups, and global enterprises, CoreWeave combines superior infrastructure performance with deep technical expertise to accelerate breakthroughs and turn compute into capability. Founded in 2017, CoreWeave became a publicly traded company (Nasdaq: CRWV) in March 2025. Learn more at www.coreweave.com .

The Security Products organization at CoreWeave builds the identity, encryption, and self-managed security integrations that protect AI workloads and data across our cloud platform. If you are passionate about building foundational security primitives that enable enterprises and the top AI labs in the world to deploy regulated and security‑sensitive workloads at extreme scale, this is the team to join!

About the role

CoreWeave is seeking a Staff or Principal Engineer for our Security Products team to lead the technical direction and implementation of encryption and key lifecycle management  In this role, you’ll design and evolve the key lifecycle management, encryption control planes, algorithm/library selection, and systems integrations that allow CoreWeave customers to deploy sensitive, high security AI workloads and data. You’ll partner closely with teams across CoreWeave to develop customer-driven cryptography technology. Your day‑to‑day will blend hands‑on system design and coding with cross‑team technical leadership, design reviews, and roadmap shaping for Security Products.

In this role, you will:

• Lead the design and evolution of encryption and key lifecycle management products.
• Manage encryption and cryptography technology development for services within our Cloud Platform, particularly those for high security and highly regulated customers.
• Design and build deep integrations between our Cloud Platform and external key sources (eg, HashiCorp Vault, AWS KMS, HSMs).
• Collaborate with other product engineering teams to support the safe use of multicloud key management technology.
• Partner with IAM to define unified authorization patterns and policy models for key management APIs with consistent semantics across the resource hierarchy.
• Establish SLIs / SLOs for Remote Key Encryption (RKE) and related services, including availability, latency, and durability guarantees for key retrieval and encryption operations.
• Partner with the Security Engineering team on threat modeling and corporate strategy to enable the most sensitive AI workloads in the world to be deployed on CoreWeave's infrastructure.
• Author and review detailed technical designs and RFCs for new RKE capabilities, mentor other engineers on the team, and provide technical leadership across Security Products and adjacent organizations.

Who You Are

• 12+