Software Engineer II

Our Purpose Mastercard powers economies and empowers people in 200+ countries and territories worldwide. Together with our customers, we’re helping build a sustainable economy where everyone can prosper. We support a wide range of digital payments choices, making transactions secure, simple, smart and accessible. Our technology and innovation, partnerships and networks combine to deliver a unique set of products and services that help people, businesses and governments realize their greatest potential. Title and Summary Software Engineer II Overview Mastercard is seeking a highly motivated DevSecOps Engineer II (Level 8) to join the Operations & Technologies engineering organisation. This role focuses on building secure, scalable, and automated software delivery platforms supporting Mastercard's critical applications and services. The DevSecOps Engineer works within Agile teams and collaborates with Software Engineering, Infrastructure, Security, Architecture, and Product teams to deliver secure, resilient, cloud-native solutions. The ideal candidate combines software engineering expertise with platform engineering, automation, cloud technologies, and application security. This hands-on role requires a strong learning mindset, excellent collaboration skills, adaptability to changing technologies and business priorities, and a passion for driving DevSecOps best practices, automation, AI-enabled productivity, and platform modernisation initiatives. Role & Responsibilities DevSecOps & CI/CD * Design, develop, and maintain CI/CD pipelines using Jenkins and DevOps tools. * Implement deployment automation using Chef and Infrastructure-as-Code practices. * Drive Continuous Integration and Continuous Delivery initiatives. * Integrate security controls, compliance checks, and quality gates into delivery pipelines. * Automate build, deployment, monitoring, and operational processes. * Continuously improve software delivery and platform capabilities. Application Security * Implement and support Secure Software Development Lifecycle (SSDLC) practices. * Support: * Static Application Security Testing (SAST) * Dynamic Application Security Testing (DAST) * Software Composition Analysis (SCA) * Container Security Scanning * Collaborate with teams to identify and remediate vulnerabilities. * Support secure coding, threat modelling, risk assessments, and security reviews. * Promote security-by-design across the software lifecycle. Infrastructure & Platform Engineering * Support and enhance enterprise platform infrastructure and services. * Demonstrate knowledge of: * TCP/IP, DNS, SSL/TLS, Routing * Load Balancers (F5, NGINX, HAProxy, etc.) * API Gateways and Reverse Proxies * Identity & Access Management (IAM) * Authentication and Authorisation * Troubleshoot infrastructure and platform issues. * Partner with Infrastructure and Operations teams to improve platform reliability and security. Middleware & Application Platforms