Principal Software Engineer - Java, Edge, Security models, TLS certificate

Our Purpose

Mastercard powers economies and empowers people in 200+ countries and territories worldwide. Together with our customers, we’re helping build a sustainable economy where everyone can prosper. We support a wide range of digital payments choices, making transactions secure, simple, smart and accessible. Our technology and innovation, partnerships and networks combine to deliver a unique set of products and services that help people, businesses and governments realize their greatest potential.

Title and Summary

Principal Software Engineer - Java, Edge, Security models, TLS certificate

Job Description: Principal Software Engineer

• The position has a unique opportunity to drive Mastercard's API Edge design, including security models, routing, traffic control, API management and other related work.
• Responsible for overall architecture of Mastercard's API Gateway. Leading, programming, testing, implementation, documentation, maintenance and support of Mastercard’s API Gateway in adherence with Mastercard standards, processes and best practices.
• Work with engineers, product managers, designers, and partner teams to deliver a set of features with the right overall design and architecture.
• Develop high quality, secure, scalable software solutions based on technical requirements specifications and design artifacts within expected time and budget.
• Research, create and evaluate technical solution alternatives in open source for the business needs.
• Follow standards in development and testing to ensure compliance with Audit and Regulatory Requirements. Adhere to Mastercard security standards, change management and quality controls, enabling automations where required.
• Support collection and reporting of project and software metrics that help billing and capacity planning.
• Provide mentorship and coaching to engineers in, and beyond, your team.
• Actively look for opportunities to enhance standards and improve process efficiency by optimizations and automations.

Role

Essential responsibilities of the position:
• Architecture and design of software solutions
• Technical solution & application architecture & design
• Development, review & ownership of architecture & design artifacts (SAD, API Specification etc.)
• Actively find ways (new technologies, tools, frameworks) to improve software solutions
• Work with Product Management and Engineering to translate product use cases and requirements to industry-leading design, architecture and implementations. Set architectural direction by grooming and prioritizing architectural stories related to baselining software stack, realization of non-functional requirement etc. and critical domain stories. Influence the product owner to balance the business and technical priorities and the value of the architecture work.
• Execute and own the baseline architecture implementations and design activities collaborating with Sr. Engineer & Engineering Team.
• Regularly communicate with management about risk analysis and design tradeoffs.
• Strong communication skills, with an ability to express and design ideas to a development team

Skills

• Understanding of Nginx or Nginx+ configurations is highly desirable.
• Understanding of TLS/SSL certificates, trust store and Certificate Authority is highly desirable
• Experience with management of applications deployed across the multiple geographic locations
• Experience in popular security Models, including OAuth1.0a, OAuth2.0 and Mutual TLS.
• Web services & API management experience
• Software development, design & architecture experience in enterprise grade software solutions.
• Programming & Scripting Languages (2 or more of Java, Groovy, C, JavaScript, Python, lua or Shell)
• Ability to operate effectively independently
• Strong communication skill (Written and Oral)
• Bachelor engineering or technology in Computer Science, Engineering or IT required. Master’s degree in related discipline preferred

Corporate Security Responsibility

All activities involving access to Mastercard assets, information, and networks comes with an inherent risk to the organization and, therefore, it is expected that every person working for, or on behalf of, Mastercard is responsible for information security and must:

• Abide by Mastercard’s security policies and practices;

• Ensure the confidentiality and integrity of the information being accessed;

• Report any suspected information security violation or breach, and

• Complete all periodic mandatory security trainings in accordance with Mastercard’s guidelines.