Job Description
The Cybersecurity Engineer - Cloud is responsible for designing, implementing, and operating security controls that protect cloud-native platforms and workloads across public cloud environments (AWS, Azure, GCP). The role partners closely with engineering, DevOps, and architecture teams to ensure cloud services are secure by design, compliant with regulatory requirements, and resilient at scale.
This position combines hands-on engineering, security architecture, and risk-based decision-making within complex, distributed, and regulated environments.
In addition to cloud security responsibilities, this role provides security oversight and engineering support for AI-enabled capabilities used across the Pismo platform. The engineer ensures that adoption of Artificial Intelligence and Large Language Models (LLMs) is aligned with Visa security controls, Pismo data-protection principles, and global regulatory expectations.
This is a remote position. A remote position does not require job duties be performed within proximity of a Visa office location. Remote positions may be required to be present at a Visa office with scheduled notice.
Visa requires at least 3 days in office, expectations of these days will be confirmed by your Hiring Manager.
Qualifications
6+ years in IAM/security engineering with strong hands-on delivery (not only governance).
Strong knowledge of IAM fundamentals: identity lifecycle, authentication, authorization, MFA, RBAC/ABAC, access reviews.
Demonstrated coding ability and automation mindset: Python/Go preferred; PowerShell/Bash acceptable; experience shipping tools used by others.
Experience implementing enterprise IAM standards and operating in compliance-driven environments (access control evidence, audits, governance).
Solid understanding of segregation of duties and production access constraints.
Multi-cloud security/IAM experience across AWS/Azure/GCP.
Experience with identity providers / governance platforms (e.g., federated SSO patterns, directory groups, access certification workflows).
Experience engineering and/or integrating PAM capabilities and processes (vaulting/rotation, JIT/JEA).
Experience applying GenAI to security operations responsibly (workflow automation, evidence generation, policy templating).
Security certifications (nice-to-have): CISSP/CISM, cloud certs, IAM-related certs.
U.S. Applicants Only
The estimated salary range for this position is $145,300.00 to $ 232,700.00 USD per year, which may include potential sales incentive payments (if applicable). Salary may vary depending on job-related factors which may include knowledge, skills, experience, and location. In addition, this position may be eligible for bonus and equity.Visa has a comprehensive benefits package for which this position may be eligible that includes Medical, Dental, Vision, 401(k), FSA/HSA, Life Insurance, Paid Time Off, and Wellness Program.
Work Hours
Varies upon the needs of the department.
Travel Requirements
This position requires travel 5-10% of the time.
Mental/Physical Requirements
This position will be performed in an office setting. The position will require the incumbent to sit and stand at a desk, communicate in person and by telephone, frequently operate standard office equipment, such as telephones and computers.
