Staff Engineer - Trust & Vault

Card vaulting & tokenization — tokenize, store, and retrieve raw card data within the PCI boundary

Authentication — 3DS / SCA and network tokenization to authenticate cardholders and strengthen every transaction

Payment optimization — lift authorization and acceptance rates through network tokens, account updater, and intelligent use of vaulted data

Account updater & portfolio migration — keep stored card credentials current to reduce declines, and migrate card portfolios between vaults and processors

The tokenization, authentication, and vaulting layer you own is foundational infrastructure for an AI-native platform — the secure card-data foundation every transaction, including agent-driven flows, depends on

AI is our default execution layer: you're expected to use AI-assisted tooling fluently across design, implementation, testing, and review, and to shape how the domain adopts it

Domain architecture and technical leadership — own the architecture of Trust & Vault across vaulting, authentication, optimization, account updater, and portfolio migration; set the technical direction with versioned APIs and event-driven design, and raise the bar for the pod

Card-data security and vaulting — architect the systems that tokenize, store, and retrieve raw card data within the PCI boundary, safely and at scale

Authentication — build and evolve authentication capabilities (3DS/SCA, network tokenization) that strengthen transactions without adding friction

Payment optimization — design capabilities that lift authorization and acceptance rates — network tokens, account updater, and smart use of vaulted data — turning secure card data into better payment outcomes

Bank-grade, resilient systems — design headless, PCI-compliant capabilities engineered for a zero-tolerance-for-failure environment, where feature velocity never compromises reliability or compliance

You Build It, You Run It — champion a YBIYRI culture: your team designs for multi-tenancy, elastic scaling, and automated observability, and owns its microservices in production

Mentorship and cross-functional collaboration — mentor engineers and partner with Product, the CTO Office, and Staff Engineers across domains to eliminate silos and deliver complex, cross-team work

Within your first 6–12 months, you've led the architecture of at least one core Trust & Vault capability (vaulting, authentication, or optimization), your pod owns its services in production under a YBIYRI model, and you're the technical voice Yuno trusts on card-data security, authentication, and PCI-compliant design.

A track record of introducing new engineering practices or standards across multiple teams

Open-source contributions or technical writing that raised the bar for others

Spanish proficiency

Languages — Go and Kotlin (core), Java

APIs — gRPC, REST

Frameworks — Spring Boot, Spring WebFlux; Go standard library

Messaging — Apache Kafka, SQS

Databases — PostgreSQL, Redis

Infrastructure — AWS, Kubernetes, Docker, Terraform

Observability — Datadog, OpenTelemetry

CI/CD — GitHub Actions, ArgoCD

Version Control — Git / GitHub