Cybersecurity Engineer- Local Candidates Only

Founded by experienced entrepreneurs and engineers in 2016, Pismo is a technology company that provides a comprehensive processing platform for banking, card issuing and financial market infrastructure and helps customers innovate and build the next generation of banking and payment solutions. Pismo joined Visa in 2024.

Leveraging Visa’s solutions, our core platform, and an expanding suite of capabilities, Pismo addresses the technological challenges that large banks, marketplaces, and fintech companies face in migrating from legacy systems to more advanced technology in the market. Pismo’s cloud-based platform empowers firms to build and launch financial products rapidly, scaling as they grow to have a broader audience while keeping high security and availability standards.

Pismo’s 500+ employees are located in more than 10 countries around the world.

We are looking for a Cybersecurity Engineer to join our Identity Engineering team. In this role, you will help build, operate, and continuously improve the security foundations that protect our services—especially around authentication, authorization, and API protection in cloud‑native environments.

You will work closely with application engineering, platform teams, and SRE to implement secure identity patterns and support the day‑to‑day reliability and security of identity services. This is a hands-on role for someone who enjoys building, automating, learning, and collaborating.

Key responsibilities include:

• Implementing and supporting identity and authorization capabilities used across internal and external services
• Assisting in the adoption of standard authentication and authorization patterns based on OAuth 2.0 and OpenID Connect
• Supporting API security controls via API Gateway (preferably Kong), including authentication flows and policy enforcement
• Helping engineering teams integrate identity solutions into their APIs/services following established security guidance
• Writing and maintaining infrastructure using Infrastructure as Code (Terraform) under existing patterns and reviews
• Supporting and troubleshooting Kubernetes workloads related to identity services (deployments, configs, runtime issues)
• Contributing to cloud security and architecture discussions with a security‑first mindset
• Participating in operational routines: on-call support (when applicable), incident response support, post-incident follow-ups, and improvements
• Improving documentation, runbooks, and internal enablement materials for identity integrations
• Continuously learning modern identity, cloud security, and DevOps practices, and applying them in day-to-day work

Basic Qualifications
2+ years of relevant work experience and a Bachelors degree, OR 5+ years of relevant work experience

Preferred Qualifications
3 or more years of work experience with a Bachelor’s Degree or more than 2 years of work experience with an Advanced Degree (e.g. Masters, MBA, JD, MD)

Required Qualifications

Experience in cybersecurity engineering, platform security, DevSecOps, or a related engineering role
Working knowledge of OAuth 2.0, OpenID Connect, JWTs, and common auth/authz patterns
Hands-on familiarity with cloud environments (AWS, GCP, or Azure) and cloud-native concepts
Experience operating or contributing to services running on Kubernetes
Experience with Terraform or similar Infrastructure as Code tools
Familiarity with API Gateways (preferably Kong) and API security concepts
Understanding of DevOps fundamentals (CI/CD, automation, version control, environments)
Ability to troubleshoot systems and collaborate effectively with engineering and SRE teams
Clear written and verbal communication skills

Work Hours: Varies upon the needs of the department.

Travel Requirements: This position requires travel 5-10% of the time.

Mental/Physical Requirements: This position will be performed in an office setting.  The position will require the incumbent to sit and stand at a desk, communicate in person and by telephone, frequently operate standard office equipment, such as telephones and computers.

Visa is an EEO Employer.  Qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, sexual orientation, gender identity, disability or protected veteran status.  Visa will also consider for employment qualified applicants with criminal histories in a manner consistent with EEOC guidelines and applicable local law.

Visa will consider for employment qualified applicants with criminal histories in a manner consistent with applicable local law, including the requirements of Article 49 of the San Francisco Police Code.

U.S. APPLICANTS ONLY: The estimated salary range for this position is 123,700.00 to 191,300.00 USD per year, which may include potential sales incentive payments (if applicable). Salary may vary depending on job-related factors which may include knowledge, skills, experience, and location. In addition, this position may be eligible for bonus and equity. Visa has a comprehensive benefits package for which this position may be eligible that includes Medical, Dental, Vision, 401 (k), FSA/HSA, Life Insurance, Paid Time Off, and Wellness Program.