Description
Mastercard's Identity Solutions – ‘Cloud Infrastructure - Edge’ team is looking for a Lead Software Engineer to help support, design, and build highly available and scalable AWS Cloud infrastructure.
The team builds infrastructure for Engineering projects, extends the platform for the future, and improves the availability and performance of applications. This position designs, develops systems, automation, and tools to help make it easier for Engineering teams to deploy services in a fast, automated, and reliable fashion.
The Identity Solutions program within the Services group works to prevent fraud by securing a user's identity through devices, identity information, and usage patterns such as passive Biometrics.
Responsibilities
- Provide technical leadership and accountability within a geographically diverse team, serving as a subject matter expert (SME) while mentoring and developing junior team members.
- Design, build, scale, and optimize infrastructure across cloud environments, ensuring solutions are highly available, reliable, secure, and scalable.
- Develop and maintain Infrastructure as Code (IaC) using tools such as Jenkins, Ansible, Argo CD, Terraform, CloudFormation, Resource Manager, and related DevOps technologies.
- Design and implement secure, highly available AWS environments, with strong expertise across core AWS services including compute, IAM, databases, caching, troubleshooting, and operational support.
- Build, manage, and scale Kubernetes (EKS) environments, including cluster architecture, deployment, service mesh, load balancing, and performance optimization to maximize availability, response time, and uptime.
- Develop and enhance monitoring and observability solutions, primarily using Prometheus, to proactively identify and resolve infrastructure, security, and performance issues while maintaining comprehensive technical documentation.
- Partner with engineering and technology teams to troubleshoot complex issues, improve system performance, participate in on-call rotations, and develop automation and custom tooling using Go, Python, Rust, and Bash while promoting industry-standard coding and engineering practices.
Requirements
- Demonstrated technical leadership and project leadership experience, with a strong track record of collaborating effectively across geographically distributed teams.
- Bachelor’s degree in Computer Science or equivalent professional experience, with excellent written and verbal communication skills.
- Deep expertise in AWS networking services, including Amazon VPC, Direct Connect, Transit Gateway, Elastic Load Balancing (ELB), Route 53, Resolver endpoints, and DNS Firewall.
- Strong knowledge of AWS network security, including Security Groups, Network ACLs (NACLs), AWS Firewall, and VPC Flow Log analysis and troubleshooting.
- Proven experience designing and supporting hybrid cloud connectivity and multi-region architectures, including VPNs, Direct Connect, high availability, and resilient network designs.
- Advanced expertise in Linux/UNIX systems, including troubleshooting, performance tuning, memory management, I/O subsystems, RAID, networking protocols, security, and system optimization.
- Hands-on experience with DevOps/BizOps, Infrastructure as Code, and automation, leveraging tools such as Terraform, Ansible, and Chef for provisioning and configuration management.
- Experience implementing and managing CI/CD pipelines using Jenkins and similar automation and deployment platforms.
- Strong programming and scripting aptitude in Go, Python, and Bash, with experience developing automation and operational tooling; familiarity with MySQL and PostgreSQL databases.
- Experience building, deploying, and managing containerized applications and orchestration platforms, including Docker, Kubernetes, Mesos, or Docker Swarm, with a strong understanding of cloud platforms including AWS, Azure, and GCP.
Work Schedule & On-Call Requirements
- Standard working hours are 7:30 AM – 3:30 PM PST, Monday through Friday.
- Participate in an on-call rotation approximately every two months once the team is fully staffed.
- During the initial staffing period, team members should expect to participate in the on-call rotation approximately every 5–6 weeks until the team reaches full capacity.
- Ability to respond to and troubleshoot production infrastructure and networking issues during assigned on-call periods.
Benefits
In line with Mastercard’s total compensation philosophy and assuming that the job will be performed in Canada, the successful candidate will be offered a competitive pay based on location, experience and other qualifications for the role and may be eligible to participate in a discretionary annual incentive program.