Staff Software Engineer

Payment Gateway Specialist

Role: Payment Gateway Specialist – Backend & Application Security

Experience: Relevant hands-on experience in payment gateway integration, backend development, and application security

Work Type: Contract

Location: To be confirmed

Position Overview

We are seeking an experienced Payment Gateway Specialist with strong expertise in CyberSource Unified Checkout (UCO), Flex Microform, Salesforce Commerce/Experience Cloud, backend development, and application security.

The ideal candidate must have hands-on experience delivering payment gateway integrations in production environments, with a strong understanding of PCI-DSS compliance, tokenization, security hardening, and AWS security services.

This role requires an independent professional who can own the end-to-end payment integration lifecycle, identify and remediate security vulnerabilities, and communicate effectively with clients and key stakeholders in a fast-paced delivery environment.

Key Responsibilities

• Design, implement, and support secure payment gateway integrations using CyberSource Unified Checkout (UCO).
• Implement and troubleshoot Flex Microform / iFrame-based tokenization flows within Salesforce Commerce or Experience Cloud environments.
• Manage the end-to-end payment gateway transition lifecycle, including integration, testing, deployment, and production validation.
• Develop and maintain backend-for-frontend (BFF) services using Node.js, Express, and middleware.
• Work with Salesforce Experience Cloud, Apex, and associated security models to ensure secure payment processing.
• Configure and support AWS WAF and API Gateway to strengthen application and API security.
• Identify, assess, and remediate application security vulnerabilities using OWASP guidelines and best practices.
• Understand PCI-DSS compliance requirements, audit evidence, Attestation of Compliance (AOC), and payment-card data scope reduction through UCO.
• Lead security hardening activities across the payment integration architecture.
• Conduct client-facing technical discussions, explain security risks in business terms, and coordinate with key stakeholders.
• Work independently, resolve technical issues proactively, and deliver solutions within aggressive project timelines.

Required Technical Skills

1. CyberSource UCO / Flex Microform

• Mandatory hands-on experience implementing CyberSource Unified Checkout in production.
• Strong understanding of Flex Microform and iFrame-based payment tokenization.
• Experience troubleshooting and supporting live payment integrations.

2. Salesforce Commerce / Experience Cloud

• Hands-on experience integrating payment gateways within Salesforce Commerce or Experience Cloud.
• Strong knowledge of Salesforce Apex and its security model.
• Understanding of secure data handling and payment workflow integration.

3. Backend Development

• Practical experience with Node.js, Backend-for-Frontend (BFF) architecture, Express.js, and middleware.
• Ability to develop, troubleshoot, and secure backend services.

4. AWS Security

• Working knowledge of AWS WAF and Amazon API Gateway.
• Understanding of API protection, request filtering, and security controls.

5. Application Security

• Strong understanding of OWASP application security principles.
• Ability to identify, troubleshoot, and remediate vulnerabilities—not merely document them.
• Experience implementing security controls and hardening application integrations.

6. PCI-DSS Compliance

• Experience working with PCI-DSS-scoped architectures.
• Understanding of Attestation of Compliance (AOC) and payment-card data security requirements.
• Knowledge of how CyberSource UCO and tokenization help reduce PCI-DSS scope.

Client Communication & Stakeholder Management

• Proven experience working directly with clients and key stakeholders.
• Ability to lead technical discussions and communicate complex security risks clearly.
• Strong problem-solving, ownership, and decision-making skills.
• Ability to work independently with minimal supervision in a fast-track delivery environment.

Mandatory Requirements

• Production-delivered CyberSource UCO / Flex Microform integration experience.
• Salesforce Commerce or Experience Cloud integration experience.
• Hands-on Node.js / Express backend development.
• Strong application security and vulnerability remediation capabilities.
• Working knowledge of AWS WAF and API Gateway.
• Experience with PCI-DSS-scoped architectures and UCO scope reduction.
• Strong client-facing communication skills.