Lead Software Engineer - Java, Spring, Springboot, Kafka, Cryptography, Session Key Derivation, HSM
Mastercard powers economies and empowers people in 200+ countries and territories worldwide. Together with our customers, we're helping build a sustainable economy where everyone can prosper. We support a wide range of digital payments choices, making transactions secure, simple, smart and accessible. Our technology and innovation, partnerships and networks combine to deliver a unique set of products and services that help people, businesses and governments realize their greatest potential.
Title and Summary
Lead Software Engineer - Java, Spring, Springboot, Kafka, Cryptography, Session Key Derivation, HSM
Providing Innovative, Secure, and Reliable Switching Solutions is the lifeblood of Mastercard Core Products, we are currently seeking a passionate, collaborative, and experienced software engineer to join our Crypto-Services Squad.
Are you a collaborator capable of communicating effectively with Business and IT stakeholders across all organizational levels?
Are you an innovator who embraces, adopts, and studies the latest technology to solve challenging business problems?
If this describes you, Mastercard wants to talk to you about the creation of our new agile Cryptographic-Services Squad. Our fully autonomous, cross functional team supports value added switching security services (e.g. Authentication and Validation) around the globe in order to improve the consumer experience.
About the Role:- Ensure quality of one or more application codebases and alignment with development standards.
- Provides input into design of automation for full infrastructure deployment; manages review of and tests for compatibility and integration processes needed to connect with other devices
- Automates large scale systems spanning multiple locations and environments.
- Writes code automating public cloud, private cloud, and bare metal.
- Automates common tasks, deploy with an IaaS model, utilizing chef, ansible, or similar
- Ability to write moderately complex scripts and programs for automation, tools, frameworks,
dashboards, alarms. (common uses: Python, Perl, PHP, JavaScript, Go).
- Orchestrates the deployment/maintenance of complex applications.
- Responsible for performance engineering of the enterprise software architecture.
- Significant code development, commitment of code/review of pull-requests, and modest day-to-day
support duties.
About You:- Extensive knowledge and experience with Java, Spring, Springboot.
- Experienced in event driven systems (Apache Kafka, NATS, etc)
- Experience in financial system encryption (PIN Blocks, CHIP, CVC) would be beneficial
- Strong experience of Cryptography in Payment cycle.• Strong experience of Session Key Derivation and validation.• Strong experience of Triple DES and Advanced Encryption Standard techniques.• Strong understanding of Thales or equivalent Payment Validation HSM modules and its commands.
- Engineering experience, preferably in high volume, low latency transaction processing systems (such as payments
transaction switching, high frequency trading systems or global real-time event streaming systems etc.)
- Experience in CI/CD pipeline creation via Jenkins.
- Delivered scalable products through a CI/CD pipeline deploying on-prem or in a public cloud infrastructure.
- Ensure quality across the full stack via rigorous CI/CD practices in all aspects of the SDLC (Builds, Test, and
Deploy).
- Strong writing and verbal communication skills
Preferred Skills:-Experience with testing frameworks and methodologies (Gtest, JUnit, mocking, etc.)
- Experienced in building platforms with Microservice architecture and RESTful APIs.
- Experience using cloud-native approaches running on Linux, leveraging Spring Boot
- Experience with virtualization like Cloud Foundry (PCF), Kubernetes (PKS), Docker etc.
- Experience with deployment via Concourse CI.
- Experience with various coding languages Java, Go, C++,ESQL, etc.
Education:
BS or MS in Computer Science
Corporate Security Responsibility
All activities involving access to Mastercard assets, information, and networks comes with an inherent risk to the organization and, therefore, it is expected that every person working for, or on behalf of, Mastercard is responsible for information security and must:
- Abide by Mastercard's security policies and practices;
- Ensure the confidentiality and integrity of the information being accessed;
- Report any suspected information security violation or breach, and
- Complete all periodic mandatory security trainings in accordance with Mastercard's guidelines.
Skills Required
- Extensive knowledge and experience with Java, Spring, Spring Boot
- Experience with event-driven systems (Apache Kafka, NATS)
- Strong experience in cryptography for payments, including Session Key Derivation
- Strong experience with Triple DES and AES encryption techniques
- Understanding and experience with Thales or equivalent Payment Validation HSM modules and commands
- Engineering experience in high-volume, low-latency transaction processing systems
- Experience building CI/CD pipelines and using Jenkins
- Experience automating infrastructure and deployments using tools such as Chef or Ansible
- Ability to write moderately complex automation scripts (examples: Python, Perl, PHP, JavaScript, Go)
- Strong writing and verbal communication skills
- BS or MS in Computer Science
- Experience with payment-specific encryption (PIN Blocks, CHIP, CVC)
- Experience with testing frameworks and methodologies (GTest, JUnit, mocking)
- Experience building microservice platforms and RESTful APIs
- Experience with cloud-native approaches on Linux and virtualization/container platforms (Cloud Foundry, Kubernetes, Docker)
- Experience with Concourse CI
- Familiarity with additional languages (C++, ESQL) and event streaming scale patterns
Mastercard Compensation & Benefits Highlights
-
Retirement Support — A 10% company retirement match (401k or equivalent) is explicitly highlighted in company materials. This level of employer contribution stands out as a core strength of the package.
-
Leave & Time Off Breadth — A global minimum of 16 weeks fully paid new‑parent leave and generous U.S. PTO (vacation, personal days, holidays, sick time, and bereavement) are clearly spelled out. These provisions indicate broad time‑off coverage across life events.
-
Wellbeing & Lifestyle Benefits — Hybrid work, a four‑week “work from elsewhere” option, meeting‑free well‑being days, five paid volunteer days, mental‑health resources, and fitness reimbursement/on‑site gyms are emphasized. Together they reflect a holistic approach to flexibility and wellbeing.
Mastercard Insights
What We Do
Mastercard powers economies and empowers people in 200+ countries and territories worldwide. Together with our customers, we’re building a resilient economy where everyone can prosper. We support a wide range of digital payments choices, making transactions secure, simple, smart and accessible. Our technology and innovation, partnerships and networks combine to deliver a unique set of products and services that help people, businesses and governments realize their greatest potential.
Why Work With Us
We live the Mastercard Way: creating value in the communities we touch, growing together through the opportunities we see, and moving fast to innovate and scale. Our collaborative culture and our passionate people are the key to what we do, driving meaningful change as one team and connecting everyone to priceless possibilities.
Gallery
Mastercard Teams
Mastercard Offices
Hybrid Workspace
Employees engage in a combination of remote and on-site work.
In our ongoing workplace evolution, we’ve introduced hybrid work, Work-From-Elsewhere Weeks and Meeting-Free Days.






.jpg)










