[Skip to main content](#main-content) [OpenNash Jobs](https://jobs.opennash.com/) [Hiring report](/reports/hiring/) · [All Uber jobs](https://jobs.opennash.com/companies/uber/) · [Search jobs](/search/) Uber · Sunnyvale, CA # Principal Security Engineer Sunnyvale, CA, United States Full-time Senior individual contributor $302,000 per year Security Listed on Uber’s official careers site. Posted October 16, 2026. Check that it is still open and apply there. [Apply on Uber’s careers site →](https://iaziqy.fa.ocs.oraclecloud.com/hcmUI/CandidateExperience/en/sites/UberCareers/job/303126) [OpenNash Jobs](https://jobs.opennash.com/) / [Uber](https://jobs.opennash.com/companies/uber/) / Principal Security Engineer ## Job description About the role and team Uber’s Security Engineering team’s mission is to protect, defend, and secure Uber’s products, infrastructure and data by building highly available, scalable and extensible security solutions and services. We are focused on proactively identifying and remediating security risks as well as swiftly detecting and mitigating security incidents. In the ever-evolving landscape of cybersecurity, we continuously adapt and evolve our defenses in order to always stay one step ahead of potential threats. As a passionate and pragmatic technologist, you will lead efforts within the organization to drive the development and operations of security services and frameworks to support user-facing products and platforms across Uber. At Uber, Principal Engineers are among the top 2% of our engineering community—senior technologists who combine vision with execution. They are trusted experts who design at scale, write production-quality code, mentor senior engineers, and set the technical culture across teams. In this role, you will be the Principal Engineer for Uber's security foundation: the identity and trust layer that every other system depends on. Thousands of services, tens of thousands of employees and partners, and a rapidly growing population of AI agents must each prove who they are and what they are permitted to do — on every request, in every region. You will own the multi-year technical direction for that foundation across our identity-first, Zero Trust stack: workload identity and service-to-service authentication, human and non-human identity, PKI and cryptographic trust, authorization policy, secrets, and device trust. You will set this direction as Uber moves rapidly toward an agentic future, where autonomous agents become first-class actors that must be identified, authorized, attributed, and contained with the same rigor we apply to humans and services, and as the company expands into new business verticals that each bring new trust boundaries, regulators, and partners. ### What you’ll do Technical Roadmap & Vision Define and deliver the multi-year architecture and strategy for Uber's identity-first Zero Trust stack, translating company-wide goals into organization, team, and project-level technical direction across multiple engineering organizations. ### Engineer at Core Design, prototype, and ship secure systems. Stay hands-on in the hardest problems — the architecture you set is one you can build, review, and debug. ### Engineering Excellence Set and hold the technical bar across the security foundation organization through design review, architectural standards, and written technical direction. Elevate the performance of engineers across organizations through mentorship and sponsorship of staff-and-above ICs. ### Reliability of Tier-0 Trust Infrastructure Identity, policy decision, and certificate services sit in the critical path of production traffic; their failure is a company-wide failure. Own availability, failure-mode, and blast-radius design for these systems, convert incident learnings into architectural fixes, and govern the safe rollout of enforcement changes. ### Identity for the Agentic Era Extend the identity and authorization plane to AI agents as first-class principals — agent identity and attestation, delegated authorization and token exchange for agent-to-agent and agent-to-service traffic, risk-adaptive control over agent actions, and runtime attribution of every agent action back to an accountable human or service owner. ### Drive Fleet-Wide Adoption Lead cross-organization migrations that retire legacy trust primitives — static secrets, long-lived credentials, implicit network trust — in favor of short-lived, attested identity, and see them through to measurable fleet coverage under strict availability constraints. ### Enable New Business Verticals Ensure the identity foundation extends cleanly to new business lines, acquisitions, cloud estates, and SaaS and partner boundaries, with a consistent model for non-human identity and least privilege. ### Cross-Functional Collaboration Partner with infrastructure, AI platform, product engineering, and business teams to integrate security seamlessly, and represent the identity and Zero Trust strategy to executive stakeholders. Influence, not authority, is the instrument. What you’ll need BS Degree in Computer Science or related field. 10+ years of experience in software engineering,with deep specialization in cybersecurity. Proven track record as a technical leader—driving design, influencing architecture, and mentoring senior engineers across organizational boundaries Expert knowledge in one or more of: identity and access management, zero trust architecture, secure systems design, applied cryptography, authorization and policy systems, or agentic/AI security Hands-on experience owning highly available, Tier-1 distributed systems in the critical path of production traffic — design, operation, and incident response Strong coding skills in languages such as Go, Python, Java, C++, or Rust Experience building scalable, reliable, and secure infrastructure at large scale ### Preferred Qualifications Advanced degree (Master’s or PhD) in Computer Science, Engineering, or a related field. Experience designing or operating Zero Trust architectures at scale: SPIFFE/SPIRE or equivalent workload identity, service mesh authentication, centralized policy decision services, device trust, and secretless service-to-service authentication. ### Depth in authentication and authorization protocols OAuth 2.0/OIDC, SAML, SCIM, mutual TLS, and PKI/certificate lifecycle management. Experience securing AI/agentic systems — agent identity, delegated authorization, guardrails, sandbox isolation, or runtime attribution for autonomous workloads. ### Experience with non-human identity at scale service accounts, API keys, cloud IAM hardening, and credential lifecycle across multi-cloud and SaaS estates. Experience leading large-scale credential or authorization migrations across a heterogeneous fleet. Contributions to open standards or the external security community (specifications, talks, publications, open source). Advanced degree in Computer Science or a related field. ## Responsibilities ### For San Francisco, CA-based roles The base salary range for this role is USD $302,000 per year - USD $336,000 per year. ### For Sunnyvale, CA-based roles For all US locations, you will be eligible to participate in Uber's bonus program, and may be offered an equity award & other types of comp. All full-time employees are eligible to participate in a 401(k) plan. You will also be eligible for various benefits. ## At a glance - Posted by the employer: Oct 16, 2026 - First seen by OpenNash: Oct 19, 2026 - Last checked: Oct 19, 2026 - Listed for: 3 days - Location: Sunnyvale, CA, United States - Employment type: Full-time - Pay: $302,000 per year[Apply on Uber’s careers site →](https://iaziqy.fa.ocs.oraclecloud.com/hcmUI/CandidateExperience/en/sites/UberCareers/job/303126) ## More jobs at Uber ### [Director of Security, Risk & Compliance](https://jobs.opennash.com/companies/uber/jobs/52c56b5053ffb6e39c6a/) Sunnyvale, CA, United States ### [Data Center Engineer, Structured Cabling & Physical Network](https://jobs.opennash.com/companies/uber/jobs/b81f4f49ba53fe3437f8/) Sunnyvale, CA, United States ### [Fleet Engineering Lead - AV Lab](https://jobs.opennash.com/companies/uber/jobs/6e967d1aa510eea1267e/) Sunnyvale, CA, United States ### [Graduate 2026 PhD Software Engineer II (AV Labs), United States](https://jobs.opennash.com/companies/uber/jobs/d13eea101513cf12a1e7/) Sunnyvale, CA, United States ### [Machine Learning Engineer II - AV Labs](https://jobs.opennash.com/companies/uber/jobs/2f18b9be6d507b8aff01/) Sunnyvale, CA, United States ## Similar jobs at other companies ### [Principal Agent Security Engineer](https://jobs.opennash.com/companies/fortinet/jobs/82197027511564795b8e/) Fortinet · Sunnyvale, CA, United States ### [Principal Software Development Engineer (Agent Security)](https://jobs.opennash.com/companies/fortinet/jobs/f69d9817d22afe86d0a1/) Fortinet · Sunnyvale, CA, United States ### [Senior Security Engineer and Principal Security Engineer (Services)- Multiple Positions](https://jobs.opennash.com/companies/microsoft/jobs/b6753970a16d429916ee/) Microsoft · United States, Multiple Locations ### [Principal Security Engineer](https://jobs.opennash.com/companies/microsoft/jobs/d2633bc987cd73bcc6cd/) Microsoft · United States, Washington, Redmond ### [Principal Software Engineer - Security Platforms](https://jobs.opennash.com/companies/jpmorganchase/jobs/840d796d17ca7a9bcced/) JPMorganChase · Columbus, OH, United States [Jobs in Sunnyvale, CA](/locations/us/ca/sunnyvale/)[Jobs in California](/locations/us-ca/)[Security jobs](/functions/security/) OpenNash lists jobs from employers’ own careers sites and does not handle applications. Dates come from the employer where stated; “first seen” and “last checked” are our own observations. OpenNash Jobs · Official listings with dates and links to the employer. [Weekly hiring report](/reports/hiring/) · [Methodology](/methodology/)