Staff + Software Security Engineer, Secure Frameworks

Staff-plus engineer on Secure Frameworks, the Anthropic Security Engineering team that builds the shared security libraries and services the rest of the company relies on. The team owns workload identity and authorization, cryptographic frameworks and the central access proxy for internal applications, aiming to make secure behaviour the default and remove whole classes of bugs. Much of the work is greenfield: the engineer designs, builds and runs foundations such as mTLS infrastructure, secure serialization, authorization frameworks and the zero-trust access gateway, partners with product, research and infrastructure teams on adoption, joins on-call and mentors others.

The posting asks for eight or more years building security-relevant production systems, Go, Rust or Python, deep knowledge of OAuth, OIDC, JWTs and service-to-service auth, hands-on PKI, X.509 and workload identity, applied cryptography, and running reliable services on Kubernetes.