Staff Software Engineer - DevSecOps

Company Description

Visa is a world leader in payments and technology, with over 259 billion payments transactions flowing safely between consumers, merchants, financial institutions, and government entities in more than 200 countries and territories each year. Our mission is to connect the world through the most innovative, convenient, reliable, and secure payments network, enabling individuals, businesses, and economies to thrive while driven by a common purpose – to uplift everyone, everywhere by being the best way to pay and be paid.

Make an impact with a purpose-driven industry leader. Join us today and experience Life at Visa.

Job Description

Visa’s Technology Organization is a community of problem solvers and innovators reshaping the future of commerce.   We operate the world’s most sophisticated processing networks capable of handling more than 65k secure transactions a second across 80M merchants, 15k Financial Institutions, and billions of everyday people.   While working with us you’ll get to work on complex distributed systems and solve massive scale problems centered on new payment flows, business and data solutions, cyber security, and B2C platforms.     

The Opportunity: 

We are looking for Versatile, curious, and energetic DevSecOps Software Engineers who embrace solving complex challenges on a global scale.  As a Visa Software Engineer, you will be an integral part of a multi-functional development team inventing, designing, building, and testing software products that reach a truly global customer base. While building components of powerful payment technology, you will get to see your efforts shaping the digital future of monetary transactions.   

The Work itself: 

• Plan, execute, and verify changes to existing software and environments: design, build, and test changes to build scripts and deployment pipelines.

• Design, develop, and maintain CI/CD pipelines using GitHub Actions and Jenkins.

• Develop, improve, and maintain automated deployment jobs and installation scripts using common scripting languages and Linux shell.

• Define, implement, and evolve branching strategies and source-control workflows, build associated automation.

• Identify manual operational processes and proactively automate them to improve speed, reliability, and auditability.

• Support release planning for new applications, including installation script development and coordination across teams.

• Track changes per change-management practices, keep procedures and standards up to date, coordinate with internal teams and external partners.

• Remediate vulnerabilities using patch and vulnerability management solutions (e.g., Qualys, TSR), monitor systems and escalate security issues to mitigate risk.

• Review system and application vulnerabilities, recommend and implement countermeasures and compensating controls to reduce risk to acceptable levels.

• Collaborate with Cybersecurity, Application, and PenTest teams to design secure solutions and ensure compliance with internal and regulatory requirements.

• Contribute to an effective Information Security Program and ongoing security-compliance activities.

• Build strong cross-functional relationships to provide superior product and release support.

• Identify opportunities to enhance standards, processes, tooling, and developer productivity.

The Skills You Bring:

• Ability to leverage AI coding assistants (e.g., GitHub Copilot) in VS Code or IntelliJ to accelerate high-quality automation.

• Practical experience designing, developing, and maintaining CI/CD pipelines with GitHub Actions and/or Jenkins.

• Experience writing and optimizing automation for build, deployment, and ops tasks using shell scripting and Linux commands.

• Experience with containers and orchestration: Docker and Kubernetes.

• Experience with Git and Artifact management (e.g., Artifactory, Docker Trusted Registry).

• Familiarity with IBM zCX Linux operating system to support Infra build from scratch including developing CI/CD pipelines.

• Exposure to patch and vulnerability management (e.g., Qualys, TSR) and applying Linux (RHEL) and Windows OS patches.

• Should have knowledge of building pipelines for various codebases such Java, Node.js, Python and C/C++ to support build/deploy automation.

• Understanding of build tools and package managers: Maven, Gradle, Conan, Make, NPM.

• Bas