Senior Platform Security Engineer
Paystack Nairobi, Nairobi Area, Kenya
Software Development · 51-200 employees
About the role
You will own and evolve the security architecture and organization-wide controls across Paystack’s multi-account AWS environment. Additionally, you will build the Platform Security function, establishing secure-by-default standards and automated controls for engineering teams.
What they look for
Requirements
The ideal candidate has deep, hands-on experience securing AWS environments at scale and designing robust access-control systems. You must be a practical partner to engineers, capable of writing high-quality defensive code and managing complex, live systems in regulated environments.
Benefits
Full description
About Paystack
Paystack’s mission is to power African ambition. Over 300K businesses across Nigeria, South Africa, Ghana, and Kenya use Paystack’s modern payments gateway, including Qatar Airways, MTN, Burger King, UPS, Africa World Airlines, AXA Mansard Insurance, FairMoney, PiggyVest, Crocs, Under Armour, Richemont Lifestyle Group, and many others.
Over the last 10 years, we’ve built products that have helped shape online payments in Africa, from automated recurring payments to direct bank payments and automated chargebacks. Today, Paystack is part of The Stack Group (TSG), a family of technology brands building modern infrastructure across payments, banking, consumer products, and emerging technologies.
At Paystack, we hire talented people, treat them with genuine respect, and give them the space, resources, and support to do the best work of their lives. We’d love your help.
About the Senior Platform Security Engineer role
Every engineering team at Paystack builds on a shared cloud platform. If that platform is not secure, nothing built on top of it is secure. This role owns that foundation - not as an oversight function or as a policy team but as the engineering layer that makes the platform trustworthy by design.
The decisions made here are not team-level decisions. You will own Paystack's AWS organisation end-to-end: its architecture, its account structure, and the organisation-wide controls that govern how every team operates within it. The guardrails you set, the permission model you design, and the security primitives you build are what all engineering teams depend on to do their own work effectively. You are upstream of all of them, and what you build has direct consequences for Paystack's customers, merchants, and regulatory standing across multiple markets.
You will inherit a functioning platform and take full ownership of it - improving what exists, completing what was started, and defining what comes next. This is not a role where someone hands you a roadmap. You will identify what needs to be solved before it is articulated, set the technical direction for how platform security works at Paystack, and make architectural decisions with company-wide reach. You will also build the Platform Security function - shaping what it looks like, how it operates, and who it eventually comprises.
We’ll trust you to
- Own and evolve the security architecture and organisation-wide controls across Paystack’s multi-account AWS environment.
- Design scalable identity and access-management systems, including secure, self-service ways for engineering teams to request and manage access.
- Establish secure-by-default cloud standards and build automated controls that help engineering teams meet them.
- Partner closely with DevOps and engineering teams, bringing security into infrastructure decisions from the outset.
- Strengthen security across secrets management, network controls, containers and the infrastructure supply chain.
- Ensure security logs and signals are reliably generated, structured and delivered to the Security Operations team.
- Translate regulatory and compliance requirements into practical infrastructure controls and automated audit evidence.
- Build production-quality tooling and automation that solve recurring cloud security problems.
- Anticipate emerging platform risks and evolve Paystack’s controls as its products, markets and infrastructure grow.
- Set the technical direction and standards for Platform Security, making secure practices straightforward for engineering teams to adopt.nditions, not just the ones you can see today
You’ll thrive in this role if you
- Have deep, hands-on experience securing AWS environments at scale, including multi-account architecture, organisation-wide policies and access governance.
- Can design access-control systems that remain secure and manageable as a company grows.
- Write high-quality, defensive code and build security infrastructure, automation and tooling yourself.
- Bring breadth across Platform Security, including IAM, secrets, networks, containers, infrastructure and software supply chains.
- Understand web security end to end and can connect application-level risks with cloud infrastructure failure modes.
- Have improved complex, live systems without unnecessarily disrupting what already works.
- Have operated in regulated environments and automated security controls and audit evidence across multiple compliance frameworks.
- Are a credible, practical partner to engineers: you identify risks early, communicate clearly, challenge decisions constructively and drive issues through to resolution.
- Work with high agency, remain calm under pressure and build scalable systems that outlast your direct involvement.
Bonus points if you
- Have helped establish or shape a Platform Security function.
- Understand the regulatory and data-protection landscape across Paystack’s markets.
- Have worked within a parent-company security programme while independently owning a regional or subsidiary environment.
- Have owned the infrastructure during security incidents.
- Have built security standards and reference architectures that engineering teams genuinely adopted.
Benefits
- Competitive compensation package and benefits
- 13th month bonus
- TSG Equity compensation
- Full medical coverage
- Wellbeing stipend
- Hybrid working environment
- Smart, kind colleagues who are invested in your growth.
Paystack is an equal opportunity employer and prohibits discrimination and harassment of any kind. We’re committed to providing employees with a work environment that is progressive and open-minded. Our employment philosophy is to hire the best people and empower them to do the best work of their lives. Employment decisions are based on business needs and individual merit without regard to race, color, religion, ethnicity, sexual orientation, nationality, marital status, gender, or age.
Similar roles
-
Lead Security Engineer, GRC
Anduril Industries Boston, Massachusetts, United States · $166K–$253K/yr
-
Information Security Engineer (R14207)
Oportun Mexico
-
Principal Application Security Specialist
Global Relay Vancouver, British Columbia, Canada · CA$125K–CA$160K/yr
-
HSM & PKI Security Engineer
CCDS Dammam, Eastern Province, Saudi Arabia
-
Security Engineer
Warp New York, New York, United States · $230K–$290K/yr
-
Product Security Engineer
YipitData (Alternative) United States · $180K/yr