Principal Security Engineer

Job-:
Engineer

Location:

Sunnyvale, CA, United States;
San Francisco, CA, United States;
Seattle, WA, United States

Schedule:

Full time, Level 7

Posted:
About the role and team Uber’s Security Engineering team’s mission is to protect, defend, and secure Uber’s products, infrastructure and data by building highly available, scalable and extensible security solutions and services. We are focused on proactively identifying and remediating security risks as well as swiftly detecting and mitigating security incidents. In the ever-evolving landscape of cybersecurity, we continuously adapt and evolve our defenses in order to always stay one step ahead of potential threats.

As a passionate and pragmatic technologist, you will lead efforts within the organization to drive the development and operations of security services and frameworks to support user-facing products and platforms across Uber.  At Uber, Principal Engineers are among the top 2% of our engineering community—senior technologists who combine vision with execution. They are trusted experts who design at scale, write production-quality code, mentor senior engineers, and set the technical culture across  this role, you will be the Principal Engineer for Uber's security foundation: the identity and trust layer that every other system depends on.

Thousands of services, tens of thousands of employees and partners, and a rapidly growing population of AI agents must each prove who they are and what they are permitted to do — on every request, in every region. You will own the multi-year technical direction for that foundation across our identity-first, Zero Trust stack: workload identity and service-to-service authentication, human and non-human identity, PKI and cryptographic trust, authorization policy, secrets, and device trust.

You will set this direction as Uber moves rapidly toward an agentic future, where autonomous agents become first-class actors that must be identified, authorized, attributed, and contained with the same rigor we apply to humans and services, and as the company expands into new business verticals that each bring new trust boundaries, regulators, and partners.

What you’ll do Technical Roadmap & Vision:
Define and deliver the multi-year architecture and strategy for Uber's identity-first Zero Trust stack, translating company-wide goals into organization, team, and project-level technical direction across multiple engineering organizations.

Engineer at Core:
Design, prototype, and ship secure systems. Stay hands-on in the hardest problems — the architecture you set is one you can build, review, and debug.

Engineering Excellence:
Set and hold the technical bar across the security foundation organization through design review, architectural standards, and written technical direction. Elevate the performance of engineers across organizations through mentorship and sponsorship of staff-and-above ICs.Reliability of Tier-0 Trust

Infrastructure: Identity, policy decision, and certificate services sit in the critical path of production traffic; their failure is a company-wide failure. Own availability, failure-mode, and blast-radius design for these systems, convert incident learnings into architectural fixes, and govern the safe rollout of enforcement changes.

Identity for the Agentic Era:
Extend the identity and authorization plane to AI agents as first-class principals — agent identity and attestation, delegated authorization and token exchange for agent-to-agent and agent-to-service traffic, risk-adaptive control over agent actions, and runtime attribution of every agent action back to an accountable human or service owner.

Drive Fleet-Wide Adoption:
Lead cross-organization migrations that retire legacy trust primitives —…