Staff Software Engineer - DevEx

VGS; United States; On-site; USD 180,000 - 260,000; Full time

Job summary

VGS is building the trust infrastructure for a new era of commerce, delivering tokenization and secure payments at scale. The Agentic API enables trusted agents to initiate purchases with secure credentials, while maintaining card data integrity across global operations.

As a Staff Software Engineer, you will craft production-grade APIs and cryptographic workflows, drive security and reliability, and apply AI-assisted engineering to accelerate delivery in a fast-moving payments ecosystem.

Qualifications

• 10+ years of experience owning outcomes in large-scale distributed systems.
• AWS ecosystem experience; Terraform for reproducible environments.
• Hands-on Kubernetes (EKS), Docker, and GitOps (Flux, Argo, GitHub Actions).
• Strong Python scripting to automate infra and ops tooling.
• Experience with Prometheus, Grafana, or OpenTelemetry at scale.
• Security-conscious mindset: API Gateways, network isolation, cloud security.

Responsibilities

• Architect Agentic Payment Infrastructure using Python 3.13+ and FastAPI.
• Define APIs and domain models for enrollment, token provisioning, intents, mandates, attestation, and cryptograms.
• Own security, reliability, scale across payment and cryptographic workflows.
• Build observability patterns: logging, metrics, tracing using OpenTelemetry and Prometheus.
• Automate provisioning with Kubernetes CRDs and APIs.
• Set testing bar: unit, integration, canary production validation.
• Lead technical design reviews and cross-functional initiatives.
• Pioneer AI-native engineering across the SDLC to accelerate prototyping and delivery.
• Collaborate with Product, Security, Infrastructure, and partners to translate requirements into secure systems.

Skills

Ownership at scale

AWS & IaC

Kubernetes & Docker

Python automation

Observability at scale

Security foundations

Tools

Terraform

Kubernetes

Docker

GitHub Actions

Job description

About VGS

VGS is building the trust infrastructure for a new era of commerce. As commerce becomes agentic, payments are increasing dramatically in volume, speed, and complexity, and the companies driving that shift need a foundation they can fully trust. That's where VGS comes in. We're the world's leader in payment tokenization, trusted by the most innovative AI and Fortune 500 companies, merchants, banks, and fintechs to power modern payments and agentic commerce. We store more than 9 billion tokens and process more than 10 billion monthly interactions, touching a third of all e-commerce. That scale isn't incidental. It's why leading companies embed our universal token vault and credential management platform directly into their stack, taming the complexity of payment data so they can move faster. Come build the platform that enables modern payments for the world's largest companies. We're helping businesses unlock new possibilities in an industry that never stops moving. And that takes exceptional people.

Trusted Engineering That Matters

Engineering at VGS is building the platform powering agentic commerce and global payments infrastructure. VGS Engineering is the pillar that supports that vision. We create a platform that is an indispensable, ubiquitous component of our partners' payments and security infrastructure. We build and operate high-scale, reliable, and resilient systems that manage mission-critical payment data across the globe. We don't just participate in the payments ecosystem; we power it.

Environment & Culture

Modern Tooling as Leverage: We value speed and impact. To ensure nothing slows you down, we arm you with a highly consistent modern stack (e.g. AWS, Kubernetes, Java, TypeScript, Python) and world-class AI-augmented SDLC tooling. We strip away the friction so you can focus on the problems that demand creativity and judgment. Ownership of Outcomes: Scaling global payments infrastructure requires individuals who take personal ownership of outcomes from day one. We look for builders who combine high agency with deep strategic alignment; channeling their urgency and relentless iteration into what matters most. Mission-Critical Accountability: We power payments infrastructure for global market leaders, making system trust and integrity our core deliverable. We don't treat compliance (PCI, SOC2, ISO27001), security patching, and platform maintenance as administrative overhead—we engineer them with first-class product discipline. In payments infrastructure, reliability is not background work, it’s part of what customers buy. Learn More: See how our engineering practices drive trust and innovation in our official blog and our reliability practices.

About the Role

We're building payment infrastructure for a world where AI agents don’t just recommend, search, and summarize. They transact. The Agentic API is creating the secure backend layer that enables trusted agents to initiate purchases, operate within user-approved mandates, retrieve scoped payment credentials, and complete transactions without exposing raw card data. As a Staff Software Engineer, you’ll help pioneer a new category of payment infrastructure at the intersection of AI, card networks, cryptography, and secure money movement, building clean, reliable APIs for the next generation of commerce.

What You’ll Do

• Architect Agentic Payment Infrastructure: Lead the design and evolution of Python 3.13+ and FastAPI services powering secure, production-critical agentic payment flows.
• Define the Core API Platform: Design APIs and domain models for card enrollment, agentic token provisioning, purchase intents, mandates, device attestation, OTP flows, confirmations, and cryptogram retrieval.
• Own Security, Reliability & Scale: Drive architectural decisions across security, scalability, availability, performance, and developer experience for sensitive payment and cryptographic workflows.
• Build Deep Observability: Establish consistent patterns for error handling, traceability, structured logging, metrics, and distributed tracing using OpenTelemetry and Prometheus.
• Automate Platform Provisioning: Design extensible provisioning workflows using Kubernetes APIs and Custom Resource Definitions.
• Set the Quality Bar: Define rigorous unit, integration, acceptance, and end-to-end testing strategies for high-risk payment flows, including canary-safe production validation.
• Lead Complex Initiatives: Lead technical design reviews, surface architectural and delivery risks early, and drive cross-functional initiatives from initial exploration through reliable production operation.
• Pioneer AI-Native Engineering: Apply AI-assisted development and agentic workflows across the SDLC to accelerate prototyping, testing refactoring, investigation, and delivery while maintaining a high quality and security bar.
• Partner Across the Ecosystem: Collaborate with Product, Security, Infrastructure, Platform, and external card-network partners to translate evolving requirements into secure, scalable systems.

What You Bring

• Ownership at Scale: 10+ years of experience taking personal ownership of outcomes in complex, large-scale distributed systems within mission-critical environments.
• AWS & Infrastructure-as-Code: Advanced proficiency in AWS ecosystems leveraging Terraform to build reproducible environments.
• Containerization & Orchestration: Strong, hands‑on experience with Kubernetes (EKS), Docker, and GitOps workflows (Flux, Argo, GitHub Actions).
• Automation & Scripting: Strong coding skills in Python to automate infrastructure and build operational tools.
• Observability Expertise: Experience implementing Prometheus, Grafana, or OpenTelemetry at scale.
• Security & Networking Foundations: Solid understanding of cloud security, API Gateways, load balancing, and network isolation, viewing security as a fundamental engineering constraint, not an afterthought.

Nice to Have

Experience with tokenization, payment processing, or security products BA/BS d