Our Purpose
Mastercard powers economies and empowers people in 200+ countries and territories worldwide. Together with our customers, we’re helping build a sustainable economy where everyone can prosper. We support a wide range of digital payments choices, making transactions secure, simple, smart and accessible. Our technology and innovation, partnerships and networks combine to deliver a unique set of products and services that help people, businesses and governments realize their greatest potential.
Title and Summary
Lead Platform Engineer
Overview
MSBX (Mastercard Secure Build Experience) is transforming how more than 11,000 software engineers build, test, and deliver software across Mastercard. Our mission is to provide a secure, resilient, and frictionless software delivery ecosystem—so engineers focus on customer value, not infrastructure complexity.
DevFlow is a cornerstone of this mission. It modernizes Mastercard’s CI/CD ecosystem by retiring legacy platforms, enabling cloud‑native and composable workflows, and embedding security, quality, and compliance by design. DevFlow is not just tooling—it is a productized CI/CD platform, built for enterprise scale, reliability, and developer trust.
This role sits at the intersection of DevOps and SRE—owning both delivery acceleration and operational excellence for CI/CD platforms that are mission‑critical to the enterprise.
Role:
As a Lead, you will provide technical leadership and end‑to‑end ownership of Mastercard’s CI/CD platform capabilities, with a strong focus on SonarQube, Artifactory, and Bitbucket.
You will act as a hands‑on platform leader—designing systems, driving standards, enabling thousands of engineers, and ensuring that CI/CD services are reliable, scalable, secure, and easy to use.
Key Responsibilities:
Platform & CI/CD Leadership
• Lead the design, delivery, and evolution of enterprise CI/CD capabilities centered on Bitbucket source control, SonarQube quality scanning, and Artifactory artifact management.
• Define and own opinionated CI/CD workflows, patterns, and guardrails that balance developer autonomy with enterprise governance.
• Drive consistent adoption of code quality gates, artifact lifecycle and promotion standards, and secure build practices across engineering teams.
• Treat CI/CD as a product—prioritizing developer experience, stability, and long‑term sustainability.
DevOps & Automation
• Design and maintain shared pipeline components, templates, and automation frameworks that reduce duplication and improve consistency.
• Automate build, operate, and run aspects of the CI/CD ecosystem—minimizing manual intervention and operational risk.
• Enable scalable, repeatable CI/CD execution using ephemeral and containerized build environments.
SRE & Operational Ownership
• Own the operational health of assigned CI/CD platforms, including:
○ Reliability and availability
○ Monitoring, alerting, and observability
○ Risk identification and remediation
○ Continuous improvement and resilience
• Partner on incident response, root cause analysis, and blameless postmortems, ensuring learnings are fed back into platform design.
• Improve feedback loops so that failures surface early, clearly, and actionably for engineering teams.
Technical Leadership & Collaboration
• Participate in prioritization and roadmap discussions with Product and Program stakeholders, translating goals into executable technical plans.
• Lead pragmatic design and trade‑off discussions—balancing speed, quality, reliability, and cost.
• Review code, pipeline changes, and automation contributed by others, ensuring alignment to standards and best practices.
• Mentor and guide engineers through hands‑on technical leadership, design reviews, and day‑to‑day problem solving.
• Contribute reusable patterns, libraries, and practices through engineering guilds and platform communities.
All About You
Experience & Background
• 12+ years of professional engineering experience, with significant ownership of platform, DevOps, or infrastructure systems at enterprise scale.
• Proven experience designing, building, and operating CI/CD platforms used by multiple teams or organizations.
• Strong fundamentals in software design, automation, reliability engineering, and operational excellence.
CI/CD & Tooling Expertise
• Hands‑on experience with SonarQube, Artifactory, and Bitbucket in enterprise environments
(or equivalent tooling such as GitHub/GitLab, Nexus, etc., with ability to ramp quickly).
• Deep understanding of:
○ Code quality and static analysis
○ Artifact lifecycle management and promotion models
○ Build governance and supply‑chain security
• Experience developing CI/CD automation using modern programming or scripting languages -one or more (Java, Groovy, Python, etc.).
SRE & Operations Mindset
• Strong production ownership mindset—you build it, you run it. Experienced with Linux/Unix.
• Experience improving reliability through monitoring, alerting, resilience patterns, and automation.
• Comfortable operating in environments with high regulatory, security, and compliance expectations.
Collaboration & Leadership
• Demonstrated capability to drive adoption of standards across diverse teams.
• Strong mentoring skills, supporting the growth of junior and mid‑level engineers.
• Clear, effective communicator, able to work seamlessly with Product, Security, Infrastructure, and Platform teams.
• Experience working in Agile delivery models, including planning, demos, and retrospectives.
Cloud & Modern Engineering Practices
• Experience working in cloud‑based or hybrid environments, with knowledge of access controls, identity, and automation. (Azure Or AWS)
• Familiarity with containerized or ephemeral execution models for CI/CD workloads. (Docker, K8s)
• Passion for simplifying systems, reducing cognitive load, and improving developer experience at scale.
Corporate Security Responsibility
All activities involving access to Mastercard assets, information, and networks comes with an inherent risk to the organization and, therefore, it is expected that every person working for, or on behalf of, Mastercard is responsible for information security and must:
Abide by Mastercard’s security policies and practices;
Ensure the confidentiality and integrity of the information being accessed;
Report any suspected information security violation or breach, and
Complete all periodic mandatory security trainings in accordance with Mastercard’s guidelines.