Lead Software Engineer - Java, Spring, Springboot, Kafka, Cryptography, Session Key Derivation, HSM
Confirmed on the employer's own hiring board on Oct 15, 2026. First seen by Alion on Jul 6, 2026. Mastercard scores A on the Alion truth index.
Our Purpose
Mastercard powers economies and empowers people in 200+ countries and territories worldwide. Together with our customers, we’re helping build a sustainable economy where everyone can prosper. We support a wide range of digital payments choices, making transactions secure, simple, smart and accessible. Our technology and innovation, partnerships and networks combine to deliver a unique set of products and services that help people, businesses and governments realize their greatest potential.
Title and Summary
Lead Software Engineer - Java, Spring, Springboot, Kafka, Cryptography, Session Key Derivation, HSMProviding Innovative, Secure, and Reliable Switching Solutions is the lifeblood of Mastercard Core Products, we are currently seeking a passionate, collaborative, and experienced software engineer to join our Crypto-Services Squad.Are you a collaborator capable of communicating effectively with Business and IT stakeholders across all organizational levels?
Are you an innovator who embraces, adopts, and studies the latest technology to solve challenging business problems?
If this describes you, Mastercard wants to talk to you about the creation of our new agile Cryptographic-Services Squad. Our fully autonomous, cross functional team supports value added switching security services (e.g. Authentication and Validation) around the globe in order to improve the consumer experience.
About the Role:
===================================
- Ensure quality of one or more application codebases and alignment with development standards.
- Provides input into design of automation for full infrastructure deployment; manages review of and tests for compatibility and integration processes needed to connect with other devices
- Automates large scale systems spanning multiple locations and environments.
- Writes code automating public cloud, private cloud, and bare metal.
- Automates common tasks, deploy with an IaaS model, utilizing chef, ansible, or similar
- Ability to write moderately complex scripts and programs for automation, tools, frameworks,
dashboards, alarms. (common uses: Python, Perl, PHP, JavaScript, Go).
- Orchestrates the deployment/maintenance of complex applications.
- Responsible for performance engineering of the enterprise software architecture.
- Significant code development, commitment of code/review of pull-requests, and modest day-to-day
support duties.
About You:
===================================
- Extensive knowledge and experience with Java, Spring, Springboot.
- Experienced in event driven systems (Apache Kafka, NATS, etc)
- Experience in financial system encryption (PIN Blocks, CHIP, CVC) would be beneficial
- Strong experience of Cryptography in Payment cycle.
· Strong experience of Session Key Derivation and validation.
· Strong experience of Triple DES and Advanced Encryption Standard techniques.
· Strong understanding of Thales or equivalent Payment Validation HSM modules and its commands.
- Engineering experience, preferably in high volume, low latency transaction processing systems (such as payments
transaction switching, high frequency trading systems or global real-time event streaming systems etc.)
- Experience in CI/CD pipeline creation via Jenkins.
- Delivered scalable products through a CI/CD pipeline deploying on-prem or in a public cloud infrastructure.
- Ensure quality across the full stack via rigorous CI/CD practices in all aspects of the SDLC (Builds, Test, and
Deploy).
- Strong writing and verbal communication skills
Preferred Skills:
===================================
-Experience with testing frameworks and methodologies (Gtest, JUnit, mocking, etc.)
- Experienced in building platforms with Microservice architecture and RESTful APIs.
- Experience using cloud-native approaches running on Linux, leveraging Spring Boot
- Experience with virtualization like Cloud Foundry (PCF), Kubernetes (PKS), Docker etc.
- Experience with deployment via Concourse CI.
- Experience with various coding languages Java, Go, C++,ESQL, etc.
Education:
BS or MS in Computer Science
Corporate Security Responsibility
All activities involving access to Mastercard assets, information, and networks comes with an inherent risk to the organization and, therefore, it is expected that every person working for, or on behalf of, Mastercard is responsible for information security and must:
Abide by Mastercard’s security policies and practices;
Ensure the confidentiality and integrity of the information being accessed;
Report any suspected information security violation or breach, and
Complete all periodic mandatory security trainings in accordance with Mastercard’s guidelines.