Lead SW Engineer - HP NonStop at Visa

Highlands Ranch, Colorado, United States -

Full Time

Start Date

Immediate

Expiry Date

19 Dec, 25

Salary

219950.0

Posted On

20 Sep, 25

Experience

10 year(s) or above

Remote Job

Yes

Telecommute

Yes

Sponsor Visa

Skills

HP Nonstop Systems, Connex Advantage Architecture, Programming Languages, TAL, C, COBOL, SCOBOL, TACL, HSMs, PCI DSS Compliance, Encryption, ISO8583, EMV, 3 D Secure, Key Management, Incident Response

Industry

IT Services and IT Consulting

Description

Company Description Visa is a world leader in payments and technology, with over 259 billion payments transactions flowing safely between consumers, merchants, financial institutions, and government entities in more than 200 countries and territories each year. Our mission is to connect the world through the most innovative, convenient, reliable, and secure payments network, enabling individuals, businesses, and economies to thrive while driven by a common purpose – to uplift everyone, everywhere by being the best way to pay and be paid. Make an impact with a purpose-driven industry leader. Join us today and experience Life at Visa. Job Description Visa’s Technology Organization is a community of problem solvers and innovators reshaping the future of commerce. We operate the world’s most sophisticated processing networks capable of handling more than 65k secure transactions a second across 80M merchants, 15k Financial Institutions, and billions of everyday people. While working with us you’ll get to work on complex distributed systems and solve massive scale problems centered on new payment flows, business and data solutions, cyber security, and B2C platforms. The Opportunity: We are looking for a versatile, curious, and energetic Senior Staff Software Engineer who embraces solving complex challenges on a global scale. As a Visa Engineer, you will be working on multiple projects and work as an integral part of a cross-functional development team. This position is for an Engineer focused on Encryption-related enhancements within the Connex Advantage switching application. This collaborative, team-based role will require a close working relationship with Product owners, Software Architects, Quality Assurance, Technical Writers, UI Designers, Key Custodians and other Software Engineers. The Work itself: Prepare technical documents, develop code, review code, build environment, review test results, and prepare plan for implementation Analyze technical impact, stability, and functionality due to any custom change Evaluate code to ensure it is valid, meets industry standards and is compatible with devices and/or operating systems Confer with management or development teams to prioritize needs, resolve conflicts, and help choose solutions Develop or validate test routines and schedules to ensure that test cases mimic external interfaces Lead design reviews and provide guidance to junior team members who are participating in design reviews. Review design documentation with engineering team members, senior project members, and architects to validate design for completeness and ensure alignment with requirements across an application, project, or product. Proactively identify defects in software code and isolate/contain the defects to prevent customer impact. Build partnerships with product management to ensure that the products being built deliver real value Identify problems uncovered by testing or customer feedback and correct problems Design and implement encryption controls for the Connex Advantage switch across data in transit and at rest, including strong TLS configurations (TLS 1.2/1.3, mTLS), authenticated encryption modes, and secure key storage. Own and drive PCI DSS compliance activities relevant to switching (scope definition, compensating controls, evidence collection, and QSA engagement), ensuring continuous compliance and scope reduction. Work with Hardware Security Modules (HSMs) for payments use cases (e.g., key generation/rotation, key ceremonies with dual control and split knowledge) and support DUKPT, TR‑31 key blocks, TR‑34 remote key loading, and PIN/PAN protection. Define monitoring, logging, and incident response for cryptographic controls Maintain cryptographic inventories, key custody records, and certificate/PKI hygiene. Essential Functions: Provides strategic technical and functional knowledge of the e-commerce platform as well as a thorough understanding of the business to direct strategy on collecting and understanding requirements. Leads meetings with product partners to recommend development and solution strategies that improve the design and functionality of interface features across a range of payment products. Formalizes Standard Processes on the use of programming languages (e.g. HTML, C++, Java) to write code that fulfills website modification requests and technical requirements. Leads and plans the piloting and integration of new technology capabilities and features that enhance the user website experience across e-commerce products. Analyzes patterns across bugs and implements systemic solutions to ensure websites remain functional and easy to use. This is a hybrid position. Expectation of days in office will be confirmed by your hiring manager. Visa will accept applications for this role until at least September 13, 2025. Qualifications Basic Qualifications: o10+ years of relevant work experience with a Bachelor’s Degree or at least 7 years of work experience with an Advanced degree (e.g. Masters, MBA, JD, MD) or 4 years of work experience with a PhD, OR 13+ years of relevant work experience.. Preferred Qualifications: o12 or more years of work experience with a Bachelor’s Degree or 8-10 years of experience with an Advanced Degree (e.g. Masters, MBA, JD, MD) or 6+ years of work experience with a PhD. o Strong knowledge on HP Nonstop systems and Connex Advantage Architecture o 13+ years related experience working on Connex/eFunds software required. o Proven experience as a Connex developer or in similar roles o Proficiency in Programming languages TAL, C, COBOL, SCOBOL and TACL on the HP NonStop platform o Expertise in HP Nonstop tools like FUP, SCUP, Peruse, Inspect, Debug, Spoolcom, Pathway, Enform, DDL, Guardian Procedure calls, TCP/IP programing, TMF o Good understanding of ISO8583 message formats o Knowledge of financial industry practices, regulations, and operations o Hands-on experience designing and implementing encryption for high throughput payment switching, including AES GCM or similar authenticated encryption, secure key storage, and hardened TLS (TLS 1.2/1.3, mTLS). o Practical experience working with HSMs in card payments environments (e.g., Thales payShield, Atalla/Utimaco). Knowledge of and experience with key generation/rotation, key ceremonies (dual control/split knowledge), secure backup/archival, and firmware management. o Expertise with payments key management standards and flows: DUKPT, TR 31 key blocks, TR 34 remote key loading, PIN block formats (ISO 0/1/3), PAN masking/truncation, and tokenization approaches. o Demonstrated ownership of PCI DSS compliance in a switching or authorization platform, including scope reduction, compensating controls, evidence production, and partnering with QSAs. Familiarity with PCI DSS v4.0 control families relevant to switching (e.g., 2, 3, 4, 5, 7, 8, 10, 11, 12). o Working knowledge of EMV and 3 D Secure implications for cryptography and data flows. o Strong technical knowledge and proven experience with card network certifications and key exchange processes. o Familiarity with applicable standards and validations: NIST SP 800 57/56/38 series, FIPS 140 2/140 3, OWASP ASVS. Experience applying these in NonStop/Connex environments. o Experience building monitoring and incident response for crypto controls (certificate lifecycle, cipher/TLS baselines, key inventory/drift detection) and automating compliance evidence. o Excellent problem-solving and analytical skills o Strong communication(both written and verbal) and interpersonal skills o Experience with end-to-end systems development life cycles and standards in Connex/HPE Nonstop development environment o Proficiency in analyzing solutions design and requirements documents Additional Information Work Hours: Varies upon the needs of the department. Travel Requirements: This position requires travel 5-10% of the time. Mental/Physical Requirements: This position will be performed in an office setting. The position will require the incumbent to sit and stand at a desk, communicate in person and by telephone, frequently operate standard office equipment, such as telephones and computers. Visa is an EEO Employer. Qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, sexual orientation, gender identity, disability or protected veteran status. Visa will also consider for employment qualified applicants with criminal histories in a manner consistent with EEOC guidelines and applicable local law. Visa will consider for employment qualified applicants with criminal histories in a manner consistent with applicable local law, including the requirements of Article 49 of the San Francisco Police Code. U.S. APPLICANTS ONLY: The estimated salary range for a new hire into this position is 151,600.00 to 219,950.00 USD per year, which may include potential sales incentive payments (if applicable). Salary may vary depending on job-related factors which may include knowledge, skills, experience, and location. In addition, this position may be eligible for bonus and equity. Visa has a comprehensive benefits package for which this position may be eligible that includes Medical, Dental, Vision, 401 (k), FSA/HSA, Life Insurance, Paid Time Off, and Wellness Program. Visa will accept applications for this role until at least end of business day MT October 31, 2025 at minimum

Responsibilities

The Lead SW Engineer will work on Encryption-related enhancements within the Connex Advantage switching application, collaborating with cross-functional teams. Responsibilities include developing code, preparing technical documents, leading design reviews, and ensuring compliance with PCI DSS standards.