# Staff Engineer - Trust & Vault **Company**: Yuno **Work arrangement**: remote **Experience**: staff **Job type**: full-time **Category**: Engineering **Industry**: Technology **Apply**: https://jobs.lever.co/yuno/2386ccb9-9b79-402a-8763-d6a41581bd2d?utm_source=yubhub.co&utm_medium=jobs_feed&utm_campaign=apply **Canonical**: https://yubhub.co/jobs/job_c35cfbeb-227 ## Description Yuno is looking for a Staff Engineer to be the senior technical leader for Trust & Vault , the domain that secures card data and optimizes how it's used across every transaction on the platform. You'll architect the foundational systems behind PCI-compliant card vaulting and tokenization, card authentication (3DS, network tokenization), and the optimization capabilities that lift authorization and acceptance rates, and raise the technical bar for the pod that builds them. **What This Domain Owns** - Card vaulting & tokenization , tokenize, store, and retrieve raw card data within the PCI boundary - Authentication , 3DS / SCA and network tokenization to authenticate cardholders and strengthen every transaction - Payment optimization , lift authorization and acceptance rates through network tokens, account updater, and intelligent use of vaulted data - Account updater & portfolio migration , keep stored card credentials current to reduce declines, and migrate card portfolios between vaults and processors **How AI Shows Up in This Role** - The tokenization, authentication, and vaulting layer you own is foundational infrastructure for an AI-native platform , the secure card-data foundation every transaction, including agent-driven flows, depends on - AI is our default execution layer: you're expected to use AI-assisted tooling fluently across design, implementation, testing, and review, and to shape how the domain adopts it **Your Contribution Will Be** - Domain architecture and technical leadership , own the architecture of Trust & Vault across vaulting, authentication, optimization, account updater, and portfolio migration; set the technical direction with versioned APIs and event-driven design, and raise the bar for the pod - Card-data security and vaulting , architect the systems that tokenize, store, and retrieve raw card data within the PCI boundary, safely and at scale - Authentication , build and evolve authentication capabilities (3DS/SCA, network tokenization) that strengthen transactions without adding friction - Payment optimization , design capabilities that lift authorization and acceptance rates , network tokens, account updater, and smart use of vaulted data , turning secure card data into better payment outcomes - Bank-grade, resilient systems , design headless, PCI-compliant capabilities engineered for a zero-tolerance-for-failure environment, where feature velocity never compromises reliability or compliance - You Build It, You Run It , champion a YBIYRI culture: your team designs for multi-tenancy, elastic scaling, and automated observability, and owns its microservices in production - Mentorship and cross-functional collaboration , mentor engineers and partner with Product, the CTO Office, and Staff Engineers across domains to eliminate silos and deliver complex, cross-team work **What Success Looks Like** Within your first 6–12 months, you've led the architecture of at least one core Trust & Vault capability (vaulting, authentication, or optimization), your pod owns its services in production under a YBIYRI model, and you're the technical voice Yuno trusts on card-data security, authentication, and PCI-compliant design. **Minimum Qualifications** - Extensive software engineering experience, with deep expertise in Go and/or Kotlin (our core backend stack) and strength across the full stack - A proven track record architecting robust, scalable, and maintainable distributed systems , event-driven platforms, APIs (gRPC/REST), and cloud-native or serverless architectures , with a strong grasp of design patterns and best practices - Experience building foundational platform capabilities or complex distributed systems, ideally involving tokenization, card vaulting, authentication (3DS / network tokenization), or PCI-scoped infrastructure - Strong experience with AWS and cloud-native services (RDS, ECS, EKS, S3, and similar) - Excellent automated testing practices , unit, integration, and end-to-end , within Agile, DevSecOps, and CI/CD workflows - Proven technical leadership , mentoring engineers, driving technical vision, and delivering complex, cross-team projects, with a feel for DORA metrics and unblocking teams - A preference for clean, modular architecture over monolithic shortcuts, and the judgment to balance reliability and compliance against feature velocity - English , advanced proficiency, written and spoken **Preferred Qualifications** - Domain expertise , PCI DSS card vaulting, tokenization and network tokenization standards, 3DS/SCA authentication, or account updater services from card networks - Payment optimization , improving authorization and acceptance rates through tokenization, authentication, or credential lifecycle - Experience in the payments or fintech industry, operating at global scale - Performance optimization and efficient algorithms for high-throughput, low-latency systems - Static analysis and code-quality tooling (e.g., SonarQube) and mature CI/CD pipelines **Tech Stack** - Languages , Go and Kotlin (core), Java - APIs , gRPC, REST - Frameworks , Spring Boot, Spring WebFlux; Go standard library - Messaging , Apache Kafka, SQS - Databases , PostgreSQL, Redis - Infrastructure , AWS, Kubernetes, Docker, Terraform - Observability , Datadog, OpenTelemetry - CI/CD , GitHub Actions, ArgoCD - Version Control , Git / GitHub **What We Offer at Yuno** - Competitive Compensation - Remote Work , you can work from everywhere - Home Office Bonus , a one-time allowance to set up your ideal home office - Work Equipment - Stock Options - Health Plan wherever you are - Flexible Days Off - Language, Professional, and Personal Growth courses ## Skills ### Required - Go - Kotlin - Java - gRPC - REST - Spring Boot - Spring WebFlux - Apache Kafka - SQS - PostgreSQL - Redis - AWS - Kubernetes - Docker - Terraform - Datadog - OpenTelemetry - GitHub Actions - ArgoCD ### Nice to have - PCI DSS - card vaulting - tokenization - network tokenization - 3DS/SCA authentication - account updater services - payment optimization - performance optimization - efficient algorithms - static analysis - code-quality tooling - SonarQube - mature CI/CD pipelines --- Source: [Apply at jobs.lever.co](https://jobs.lever.co/yuno/2386ccb9-9b79-402a-8763-d6a41581bd2d?utm_source=yubhub.co&utm_medium=jobs_feed&utm_campaign=apply)