Software Engineer, AWS Cloud Infrastructure & Security

About the position

Join our mission-driven team building the future of digital commerce on our rapidly scaling Priceless Platform. We are experiencing tremendous growth as a premium B2B2C (Business to Business to Consumer) platform delivering world-class experiences to Mastercard’s banking partners globally. Acquired after being a successful Silicon Valley startup, we maintain our drive for innovation and velocity even as part of Mastercard. Priceless Platform is seeking an experienced Software Engineer specializing in AWS Cloud Infrastructure, SaaS Integrations, Security Implementations, and Operational Excellence. The ideal candidate will have expertise in designing, managing, and securing scalable platforms for web applications, backend APIs, and databases. This is an opportunity to join a collaborative, cloud native engineering team focused on reliability and scale. You will collaborate with talented engineers, guide adoption of technologies like AWS (Amazon Web Services) and ensure operational excellence as our portfolio expands exponentially. If you are passionate about creating and maintaining machine critical enterprise cloud infrastructure, we want to hear from you. Together we will build on our momentum and create the future of digital commerce. The role is open in our Mastercard Atlanta or St Louis offices.

Responsibilities

• Design, deploy, and manage scalable and secure AWS cloud infrastructure to support various applications and services.
• Implement infrastructure as code (IaC) using tools such as AWS Boto3, Terraform, CloudFormation, or AWS CDK to automate the provisioning and management of cloud resources.
• Move the platform towards containerization and ephemeral infrastructure, allowing for quick provisioning and decommissioning of resources as needed, reducing overhead and optimizing cost.
• Enhance AWS cloud resources for performance, reliability, and cost efficiency, ensuring that the infrastructure meets business requirements.
• Automate provisioning, scaling, and monitoring using CI/CD pipelines and DevOps practices, integrating with tools like Bitbucket, GitHub and GitHub Actions, or AWS Code Pipeline.
• Design and implement comprehensive security models for web applications, backend APIs, databases, and cloud infrastructure, ensuring robust protection against threats.
• Enforce security best practices, including encryption, IAM policies, and network security measures, to safeguard sensitive data.
• Conduct security audits, vulnerability assessments, and penetration testing to identify and mitigate potential risks.
• Implement and manage security mechanisms such as Web Application Firewalls (WAF), DDoS protection, and intrusion detection/prevention systems.
• Ensure compliance with industry standards such as GDPR, PCI/PII, SOC 2, and ISO 27001 by implementing and maintaining relevant controls and practices.
• Build and maintain robust monitoring, logging, and alerting systems using tools like CloudWatch, Dynatrace, Splunk, or Datadog to ensure the health and performance of the infrastructure.
• Ensure high availability and disaster recovery by implementing redundant systems, backup strategies, and failover mechanisms.
• Conduct root cause analysis (RCA) for production incidents, identifying and addressing underlying issues to prevent recurrence.
• Drive continuous improvement in operational processes by implementing best practices, automating repetitive tasks and optimizing workflows.
• Optimize application performance by identifying and addressing bottlenecks, conducting performance testing and implementing caching strategies.
• Troubleshoot and resolve application-related issues, working closely with development teams to implement secure coding practices and address vulnerabilities.
• Design and manage secure and highly available distributed database systems, including relational and NoSQL databases, to support application needs.
• Implement database security measures such as encryption, access controls, and regular audits to protect data integrity and confidentiality.
• Optimize database performance through indexing, query optimization, and capacity planning, ensuring efficient data retrieval and storage.
• Work with cross-functional teams, including developers, operations, and security professionals, to deliver end-to-end solutions that meet business objectives.
• Mentor junior engineers, providing guidance and promoting best practices in operational excellence and security awareness.
• Stay updated with trends and technologies in cloud computing, security, and SaaS integrations, continuously enhancing skills and knowledge.

Requirements

• Minimum 5+ years of relevant software development industry experience in a fast-paced tech environment.
• Proven experience in designing, deploying, and managing cutting edge cloud native infrastructure on top of AWS public cloud by leveraging services like EC2, S3, RDS, ECS, SES, SNS, Lambda, and Event Bridge.
• Strong experience with third-party SaaS platform integrations and API development, ensuring seamless interoperability and functionality.
• Hands-on experience in implementing security models for web applications, APIs, databases, and cloud infrastructure, including the use of PKI, IAM, encryption, and security monitoring tools.
• Operational background with experience in monitoring, incident management, and root cause analysis, ensuring high availability and reliability of systems.
• Proficiency in scripting languages (e.g., Python, Bash) and infrastructure as code tools (e.g., Terraform, CloudFormation) to automate infrastructure.
• Knowledge of web application security principles, including OWASP Top 10, secure coding practices, and API security measures.
• Experience in securing and optimizing both relational and NoSQL databases, ensuring data integrity and performance.
• Familiarity with DevOps practices, including CI/CD pipelines, containerization (Docker, Kubernetes), and automation tools.

Nice-to-haves

• Certifications such as AWS Certified Solutions Architect, AWS Certified Security Specialty, or CISSP, demonstrating expertise in cloud architecture and security.
• Experience with multi-cloud environments, including AWS, Azure, and GCP, providing flexibility and resilience in cloud deployments.
• Familiarity with serverless architectures and distributed microservices, enabling scalable and efficient application development and deployment.
• Knowledge of compliance frameworks like GDPR, PCI/PII, SOC 2, or ISO 27001, ensuring adherence to industry standards and regulations.

Benefits

• Insurance (including medical, prescription drug, dental, vision, disability, life insurance)
• Flexible spending account and health savings account
• Paid leaves (including 16 weeks new parent leave, up to 20 paid days bereavement leave)
• 10 annual paid sick days
• 10 or more annual paid vacation days based on level
• 5 personal days
• 10 annual paid U.S. observed holidays
• 401k with a best-in-class company match
• Deferred compensation for eligible roles
• Fitness reimbursement or on-site fitness facilities
• Eligibility for tuition reimbursement
• Gender-inclusive benefits