API Security Principal Software Engineer

What you need to know about the role: We’re looking for an engineer to help redesign and implement PayPal’s API services, including API GW and Service Mesh. This is a hands-on position, and we’re looking for someone who can not only implement the relevant solutions, but also design them and identify the correct solutions. Meet our team: You will be part of a team addressing the most significant threats, with a new approach aimed at all of PayPal. This includes researching and introducing modern API management technologies, and customizing them to be suitable to a broad range of platforms and technologies. You will be impacting the work of developers across PayPal, with the goal of enabling them to write secure APIs with as little friction as possible.

Your way to impact

You will be part of a team addressing the most significant threats, with a new approach aimed at all of PayPal. This includes researching and introducing modern API management technologies, and customizing them to be suitable to a broad range of platforms and technologies. You will be impacting the work of developers across PayPal, with the goal of enabling them to write secure APIs with as little friction as possible.

Your day to day

In your day to day role you will XXX

• Implement and upgrade API GW architecture that
  • Enforces a set authentication and authorization model at a trust boundary
  • Validates sessions
  • Validates API schema/specification
  • Specific HTTP headers
  • Digital signatures
• Assess and integrate existing API GW solutions, such as cloud native solutions
• Implement and upgrade a service mesh that ensures encryption, authentication, and authorization within a trust zone
• Assess and integrate existing Service Mesh solutions, such as cloud native solutions
• Design and develop a reference implementation (working code) that aligns with the AP Framework Architecture
• Assist development teams with defining and implementing a transitional architecture (i.e., how they evolve where there are today to the new Framework).
• Conduct necessary POCs to validate new architecture patterns
• Perform advisory role to senior leadership and influence key technology decisions
• Coach and mentor development teams

What do you need to bring-

• 5+ years managing engineers including hiring and performance management responsibilities
• 6+ years of experience in Software development/Information security including work with API-rich environments
• Experience with Enterprise Security solutions and Practices (Secure Coding Practices, IAM Solutions)
• Experience with API GW technology
• Experience with containerization platforms such as Docker, Kubernetes, and PCF
• Experience with Domain Driven Design, API First Approaches, AI/ML, Data Governance, Analytics, Cloud and SAAS/PAAS platforms
• Preferred/relevant certifications include CISSP, CRISC, CISA, CCSP
• Experience with cloud computing platforms like AWS, GCP and Azure
• Excellent analytical skills with the ability to use data for effective story telling and pre-emptively provide insights to data customers that further the business
• Outstanding thought leadership, architectural and implementation skills – a thinker and a doer – can look at information security comprehensively and strategically and ready to translate business strategy into technical vision and strategy. 
• Demonstrated ability to lead with innovative ideas rather than follow the competition and traditional approaches; an "out-of-the-box" thinker will determine what PayPal needs to build today to get ahead of future threats. 
• Customer-oriented thinking (specifically, internal customers, serving the PayPal developer community)

**We know the confidence gap and imposter syndrome can get in the way of meeting spectacular candidates. Please don't hesitate to apply.