At American Express, our culture is built on a 175-year history of innovation, shared values and Leadership Behaviors, and an unwavering commitment to back our customers, communities, and colleagues. As part of Team Amex, you'll experience this powerful backing with comprehensive support for your holistic well-being and many opportunities to learn new skills, develop as a leader, and grow your career.

Here, your voice and ideas matter, your work makes an impact, and together, you will help us define the future of American Express.

How will you make an impact in this role?

Responsible to build and mature the Security Automation program by designing and developing tools with security in mind and will ensure the success of the American Express journey towards hybrid cloud.

To be successful, you will work very closely with other Technology Risk and Information Security(TRIS) functions, as well as Cloud Engineering, Cloud Security Strategy, Cloud Operations, and many other Technology and non-Technology teams to identify, solution, and deliver security code elements supporting automation.

You will mature a program which strives to drive automation, zero touch, and idempotency through "everything-as-code". This position demands a well-organized; willing to take action teammate, with the ability to prioritize daily work; work on multiple initiatives simultaneously; establish and maintain an outward looking view on new and evolving network edge technologies; and an ability to mature and operate business critical, end-to-end processes and solutions while ensuring an excellent colleague user experience.

Responsibilities Include:

Design and mature the Security Automation program crafted to deliver security code elements related to automation across private and public multi-cloud

Collaborate with company architects and SMEs to deliver complete automation solutions.

Provide security and engineering expertise and mentorship to the Cloud Programs, including Infrastructure as a Service (IaaS), Platform as a Service (PaaS), and Cloud Application Architecture subprograms.

Develop deep understanding of tie-ins with other systems and platforms within the supported domains.

Responsible for all aspects of development, performing hands-on architecture, design, and development of automation systems

Experience in Spring Boot framework and its implementation.

Experience in CICD/Automation and writing resilient and self-healing code base.

Hands on experience in Web engineering coding and deployment.

Identify exciting opportunities for adopting innovative technology to solve existing needs and predicting future challenges.

Good attitude, communication, willingness to learn and collaborate

Bring a culture of innovation, ideas, and continuous improvement

Challenging status quo, demonstrate risk taking, and implement creative ideas

Required Skills/Experience

10+ years of software development experience using any of the following languages: Java, JavaScript (Node.js), Python, Golang (2+ years). Must have a deep understanding of the language and its ecosystem.

Experience with Gitbub, Githib Actions,

Experience with Infrastructure as Code (IaC) tools like Terraform - 5 years of experience using one or more prominent software frameworks.

Experience in microservices architecture is required. - Understanding of classical or cloud-native design patterns is required.

Experience with Docker, Open Containers Initiative, or similar is required.

Understanding of Cloud architecture, including securing public cloud with data protection controls.

Knowledge of security configuration management, container security, endpoint security and secrets management as they are applied to cloud applications.

Knowledge of network architecture, proxy infrastructure, and programs to support network access and enablement. (Preferred)

Knowledge of multiple Information Security domains, such as Infrastructure Vulnerability, Data Loss Prevention, End User Security, Network Security, Internet Security, Identity & Access Management, etc. (Preferred)

Cloud Engineering or Security Certification  AWS Certified DevOps Engineer, AWS Certified Security, GCP Cloud DevOps Engineer, GCP Cloud Security Engineer or similar (Preferred)