Staff Info Security Specialist-cloud Security

You Lead the Way. We’ve Got Your Back.

At American Express, we know that with the right backing, people and businesses have the power to progress in incredible ways. Whether we’re supporting our customers’ financial confidence to move ahead, taking commerce to new heights, or encouraging people to explore the world, our colleagues are constantly redefining what’s possible — and we’re proud to back each other every step of the way. When you join #TeamAmex, you become part of a diverse community of over 60,000 colleagues, all with a common goal to deliver an exceptional customer experience every day.

American Express is on an exciting Cloud transformation led by a high-energy, delivery-focused team delivering security as code and integration to enable on-premise equivalent security models for cloud workloads. The Cloud Security organization builds and delivers technology which enables shift left security integration through partnership and collaboration across Technology Risk and Information Security, as well as multiple Technology teams. The Cloud Security Architect will influence and guide the maturity of this enterprise program; partner with key stakeholders and collaborators to design and develop tools to deliver security requirements for the enterprise; and will ensure the success of the American Express journey towards hybrid cloud. The Architect will be accountable for securely enabling the cloud journey through a delivery-based program.

To be successful, you will work very closely with other Technology Risk and Information Security functions, as well as Cloud Security Engineering, Cloud Security Strategy, Cloud Operations, and many other Technology and non-Technology teams to identify, solution, and deliver security code and hybrid infrastructure elements. You will mature a program which aims to drive automation, zero touch, and idempotency through “everything-as-code”. This position demands a well-organized action-oriented team player with the ability to prioritize daily work; work on multiple initiatives simultaneously; establish and maintain an outward looking view on new and evolving network edge technologies; and an ability to mature and operate business critical, end-to-end processes and solutions - while ensuring a great colleague user experience.

Responsibilities Include:

- Provide thought-leadership for all Cloud Security domains delivering an integrated view for the enterprise and partnering to deliver security code elements across private and public multi-cloud.
- Provide security and engineering expertise and guidance to the Cloud Programs, including Infrastructure as a Service (IaaS), Platform as a Service (PaaS), and Cloud Application Architecture subprograms.
- Define cloud-optimized architecture security patterns and contribute to Enterprise Architecture governance.
- Drive proof of concepts that assess the suitability of solutions and demonstrate to our product partners how technology can be leveraged.
- Collaborate with enterprise architects and SMEs to deliver complete security architecture solutions.
- Work with the Cloud Security Engineering team which designs and develops tools to delivery security requirements for the enterprise.
- Document architecture enabling a risk-based approach suppring enterprise plans and a strategy for delivery of a secure cloud platform - regardless of Cloud Service Provider or a on-premise/public implemenation.
- Identify exciting opportunities for adopting new technologies to solve existing needs and predicting future challenges..

As part of our diverse tech team, you can architect, code and ship software that makes us an essential part of our customers’ digital lives. Here, you can work alongside talented engineers in an open, supportive, inclusive environment where your voice is valued, and

you make your own decisions on what tech to use to solve challenging problems. Amex offers a range of opportunities to work with the latest technologies and encourages you to back the broader engineering community through open source. And because we

understand the importance of keeping your skills fresh and relevant, we give you dedicated time to invest in your professional development. Find your place in technology on #TeamAmex.
- 7 years of experience in Information Security roles with increase of responsibilities and scope
- 5 years of experience using one or more prominent software frameworks.
- Software development experience using any of the following languages: Java, JavaScript (Node.js), Python, Golang. Must have a deep understanding of the language and its ecosystem.
- Demonstrated experience in a leadership role.
- Experience in microservices architecture is required.
- Understanding of cloud architecture and security fundamentals including containers, software-defined networks, high availability design, multi-cloud, and serverless compute.
- Experience with principles such as API-first development, Everything-as-Code, immutab