Senior Software Engineer - Encryption & PHI

About the role

ABOUT STACKAI

StackAI is the enterprise AI transformation platform for organizations with regulated and complex operations. It gives teams one place to build, deploy, govern, and scale AI agents that can analyze data, connect to business systems, and carry out business-critical workflows.

Those agents need to work wherever an enterprise’s data and systems live. StackAI supports more than 100 enterprise integrations and can be deployed in our multi-tenant cloud, in a customer’s VPC, or on-premises—allowing organizations to bring AI into sensitive operational work while retaining control over where their agents and data run.

StackAI is an Asana company and continues to operate as its own product and brand.

ABOUT THE ROLE

We are looking for a senior Python engineer who has built security-critical product systems.

You will join the Core Engineering team and build the systems that determine how StackAI encrypts customer data, manages keys and signatures, handles PHI and PII, protects customer credentials, and enforces tenant and authentication boundaries.

We’re looking for an engineer who brings strong security judgment to the software they build: someone who can move between architecture and implementation, reason carefully about trust boundaries, and turn security requirements into reliable product capabilities.

This is hands-on backend engineering in an existing, fast-moving codebase. You will write production Python and take projects from initial investigation and design through implementation, migration, rollout, and operation.

The systems you build will shape which sensitive and regulated workloads enterprises can run on StackAI and how confidently they can put them into production.

WHAT YOU’LL DO

- Build encryption and key-management systems. Design and evolve how customer data is encrypted, how keys are scoped and rotated, and how these systems work across hosted, VPC, and on-premises deployments.

- Protect sensitive data. Build the controls that detect, transform, and safely handle PHI, PII, and other sensitive data across workflows, connectors, model calls, logs, and storage.

- Secure customer credentials. Protect the credentials and tokens customers provide to StackAI, from storage and access control through their use at runtime.

- Strengthen product trust boundaries. Improve tenant isolation, signing and verification, session and token handling, and service-to-service authentication.

- Create shared security foundations. Build Python services, libraries, and APIs that make security-critical behavior consistent and straightforward for other engineers to use.

- Evolve live systems safely. Plan and execute migrations, compatibility periods, staged rollouts, observability, recovery, and rollback.

WHAT WE’RE LOOKING FOR

- 4+ years of experience building and operating production backend systems.