Payment Gateway Specialist

Role: Payment Gateway Specialist – Backend & Application Security

Experience: Relevant hands-on experience in payment gateway integration, backend development, and application security

Position Overview

We are seeking an experienced Payment Gateway Specialist with strong expertise in CyberSource Unified Checkout (UCO), Flex Microform, Salesforce Commerce/Experience Cloud, backend development, and application security.

The ideal candidate must have hands-on experience delivering payment gateway integrations in production environments, with a strong understanding of PCI-DSS compliance, tokenization, security hardening, and AWS security services.

This role requires an independent professional who can own the end-to-end payment integration lifecycle, identify and remediate security vulnerabilities, and communicate effectively with clients and key stakeholders in a fast-paced delivery environment.

Key Responsibilities

• Design, implement, and support secure payment gateway integrations using CyberSource Unified Checkout (UCO).
• Implement and troubleshoot Flex Microform / iFrame-based tokenization flows within Salesforce Commerce or Experience Cloud environments.
• Manage the end-to-end payment gateway transition lifecycle, including integration, testing, deployment, and production validation.
• Develop and maintain backend-for-frontend (BFF) services using Node.js, Express, and middleware.
• Work with Salesforce Experience Cloud, Apex, and associated security models to ensure secure payment processing.
• Configure and support AWS WAF and API Gateway to strengthen application and API security.
• Identify, assess, and remediate application security vulnerabilities using OWASP guidelines and best practices.
• Understand PCI-DSS compliance requirements, audit evidence, Attestation of Compliance (AOC), and payment-card data scope reduction through UCO.
• Lead security hardening activities across the payment integration architecture.
• Conduct client-facing technical discussions, explain security risks in business terms, and coordinate with key stakeholders.
• Work independently, resolve technical issues proactively, and deliver solutions within aggressive project timelines.

Required Technical Skills

1. CyberSource UCO / Flex Microform

• Mandatory hands-on experience implementing CyberSource Unified Checkout in production.
• Strong understanding of Flex Microform and iFrame-based payment tokenization.
• Experience troubleshooting and supporting live payment integrations.

2. Salesforce Commerce / Experience Cloud

• Hands-on experience integrating payment gateways within Salesforce Commerce or Experience Cloud.
• Strong knowledge of Salesforce Apex and its security model.
• Understanding of secure data handling and payment workflow integration.

3. Backend Development

• Practical experience with Node.js, Backend-for-Frontend (BFF) architecture, Express.js, and middleware.
• Ability to develop, troubleshoot, and secure backend services.

4. AWS Security

• Working knowledge of AWS WAF and Amazon API Gateway.
• Understanding of API protection, request filtering, and security controls.

5. Application Security

• Strong understanding of OWASP application security principles.
• Ability to identify, troubleshoot, and remediate vulnerabilities - not merely document them.
• Experience implementing security controls and hardening application integrations.

6. PCI-DSS Compliance

• Experience working with PCI-DSS-scoped architectures.
• Understanding of Attestation of Compliance (AOC) and payment-card data security requirements.
• Knowledge of how CyberSource UCO and tokenization help reduce PCI-DSS scope.

Client Communication & Stakeholder Management

• Proven experience working directly with clients and key stakeholders.
• Ability to lead technical discussions and communicate complex security risks clearly.
• Strong problem-solving, ownership, and decision-making skills.
• Ability to work independently with minimal supervision in a fast-track delivery environment.

Mandatory Requirements

• Production-delivered CyberSource UCO / Flex Microform integration experience.
• Salesforce Commerce or Experience Cloud integration experience.
• Hands-on Node.js / Express backend development.
• Strong application security and vulnerability remediation capabilities.
• Working knowledge of AWS WAF and API Gateway.
• Experience with PCI-DSS-scoped architectures and UCO scope reduction.
• Strong client-facing communication skills.

Ideal Candidate Profile

The ideal candidate is a hands-on technical specialist who combines payment gateway integration, Salesforce, backend engineering, and application security expertise. They must have successfully delivered secure payment integrations in production, be comfortable owning technical security decisions, and be capable of leading client discussions without requiring extensive supervision.