Title and Summary

Lead Software Engineer

Overview

The Identity Solutions - 'Cloud Infrastructure - Edge' team is looking for a Lead Software Engineer to help support, design, and build our highly available and scalable AWS Cloud infrastructure which our products are built on. The team builds infrastructure for Engineering projects, extends our platform for the future, and improves the availability and performance of our applications. This position also designs, develops systems, automation, and tools to help make it easier for Engineering teams to deploy services in a fast, automated and reliable fashion. Ange depending on the team you work on.

The Identity Solutions program within the Services group works to prevent fraud by securing a user's identity through their devices, identity information, and usage patterns such as passive Biometrics. Comprised of best-in-class solutions from Ekata (a Mastercard company), we use complex machine learning, combined with device, identity, and transaction information from billions of transactions to reduce user friction to enable highly secure real time transactions.

Role
• Provide technical leadership and accountability within a geographically diverse team, serving as a subject matter expert (SME) while mentoring and developing junior team members.
• Design, build, scale, and optimize infrastructure across cloud environments, ensuring solutions are highly available, reliable, secure, and scalable.
• Develop and maintain Infrastructure as Code (IaC) using tools such as Jenkins, Ansible, Argo CD, Terraform, CloudFormation, Resource Manager, and related DevOps technologies.
• Design and implement secure, highly available AWS environments, with strong expertise across core AWS services including compute, IAM, databases, caching, troubleshooting, and operational support.
• Build, manage, and scale Kubernetes (EKS) environments, including cluster architecture, deployment, service mesh, load balancing, and performance optimization to maximize availability, response time, and uptime.
• Develop and enhance monitoring and observability solutions, primarily using Prometheus, to proactively identify and resolve infrastructure, security, and performance issues while maintaining comprehensive technical documentation.
• Partner with engineering and technology teams to troubleshoot complex issues, improve system performance, participate in on-call rotations, and develop automation and custom tooling using Go, Python, Rust, and Bash while promoting industry-standard coding and engineering practices.

All About You
• Demonstrated technical leadership and project leadership experience, with a strong track record of collaborating effectively across geographically distributed teams.
• Bachelor's degree in Computer Science or equivalent professional experience, with excellent written and verbal communication skills.
• Deep expertise in AWS networking services, including Amazon VPC, Direct Connect, Transit Gateway, Elastic Load Balancing (ELB), Route 53, Resolver endpoints, and DNS Firewall.
• Strong knowledge of AWS network security, including Security Groups, Network ACLs (NACLs), AWS Firewall, and VPC Flow Log analysis and troubleshooting.
• Proven experience designing and supporting hybrid cloud connectivity and multi-region architectures, including VPNs, Direct Connect, high availability, and resilient network designs.
• Advanced expertise in Linux/UNIX systems, including troubleshooting, performance tuning, memory management, I/O subsystems, RAID, networking protocols, security, and system optimization.
• Hands-on experience with DevOps/BizOps, Infrastructure as Code, and automation, leveraging tools such as Terraform, Ansible, and Chef for provisioning and configuration management.
• Experience implementing and managing CI/CD pipelines using Jenkins and similar automation and deployment platforms.
• Strong programming and scripting aptitude in Go, Python, and Bash, with experience developing automation and operational tooling; familiarity with MySQL and PostgreSQL databases.
• Experience building, deploying, and managing containerized applications and orchestration platforms, including Docker, Kubernetes, Mesos, or Docker Swarm, with a strong understanding of cloud platforms including AWS, Azure, and GCP.

Work Schedule & On-Call Requirements
• Standard working hours are 7:30 AM - 3:30 PM PST, Monday through Friday.
• Participate in an on-call rotation approximately every two months once the team is fully staffed.
• During the initial staffing period, team members should expect to participate in the on-call rotation approximately every 5-6 weeks until the team reaches full capacity.
• Ability to respond to and troubleshoot production infrastructure and networking issues during assigned on-call periods.

#LI-FT1

Corporate Security Responsibility

All activities involving access to Mastercard assets, information, and networks comes with an inherent risk to the organization and, therefore, it is expected that every person working for, or on behalf of, Mastercard is responsible for information security and must:

• Abide by Mastercard's security policies and practices;
• Ensure the confidentiality and integrity of the information being accessed;
• Report any suspected information security violation or breach, and
• Complete all periodic mandatory security trainings in accordance with Mastercard's guidelines.

In line with Mastercard's total compensation philosophy and assuming that the job will be performed in Canada, the successful candidate will be offered a competitive pay based on location, experience and other qualifications for the role and may be eligible to participate in a discretionary annual incentive program.

Pay Ranges
Vancouver, Canada: $127,000 - $203,000 CAD