Senior Java/ AI Engineer- Cybersecurity Engineer

Job Description

Joining Amex Tech means discovering and shaping your contribution to something big. Here, you can work alongside talented tech teams and build a unique career with the Powerful Backing of American Express. With a range of opportunities to work with the latest technologies, and a commitment to back the broader engineering community through open source, our mission is to power your success. Because Amex Tech is powered by our technology, our culture, and our colleagues.

The Technology organization enables and accelerates the company’s growth strategies, delivering global capabilities and services in support of Amex’s customers and colleagues, while maintaining 24/7 servicing and availability to ensure an uninterrupted, high-quality customer experience. Technology provides the foundation for everything we do in the company while driving differentiation through building and leveraging innovative technology and data insights.

At American Express, our mission is to deliver the world’s best customer experience every day. At the heart of this mission is our Information Security organization, enabling exceptional experiences built on a foundation of trust, service, and security. We leverage advanced technologies and data-driven insights to stay ahead of an evolving threat landscape. We foster a culture of passion, curiosity, and courage—empowering you to innovate, grow, and help shape the future of a Fortune 100 company.

Trust. Service. Security.

The Data Security team is responsible for safeguarding the organization’s most critical asset—its data—by ensuring confidentiality, integrity, and availability across all platforms and environments. Working at the intersection of cybersecurity, data governance, and privacy, the Data Security team focuses on capabilities such as data classification, encryption, secure data access, and monitoring. The team partners closely with engineering, risk, and business units to embed security controls throughout the data lifecycle—from creation and storage to sharing and archival.

We are seeking an experienced Senior Cybersecurity Engineer to join our Data Security organization. This role will design, develop, and modernize secure, scalable, and resilient cryptographic services while accelerating the adoption of AI-enabled engineering and intelligent automation.

The ideal candidate will combine deep software engineering expertise with hands-on experience in PKI, cryptography, encryption, tokenization, digital certificates, secrets and key management, APIs, and cloud-native technologies.

A key focus of this role will be leveraging Generative AI and AI-based automation across engineering and operational workflows to improve developer productivity, automate vulnerability remediation, proactively identify and remediate issues, reduce manual intervention, and advance our journey toward incident-free operations.

Responsibilities

• Design, develop, and maintain enterprise-grade PKI, cryptographic, and Data Security services.
• Build solutions leveraging PKI, symmetric/asymmetric cryptography, encryption, tokenization, digital certificates, signing, and cryptographic key management.
• Drive adoption of Generative AI and AI-assisted engineering across development, testing, code reviews, documentation, troubleshooting, and vulnerability remediation.
• Develop AI-enabled automation to proactively identify operational issues, accelerate root-cause analysis, automate remediation, and prevent recurring incidents.
• Develop and leverage AI agents and intelligent workflows to automate repetitive engineering and operational activities and improve developer productivity.
• Develop and integrate applications and services with HashiCorp Vault, KMS, HSM, enterprise PKI, and certificate management platforms.
• Design and develop secure APIs and microservices using Java, Python, Go, JavaScript/TypeScript, or similar technologies.
• Design and integrate REST and SOAP services using secure authentication, authorization, and communication patterns.
• Build and operate cloud-native services using Kubernetes, Docker, service mesh, and public/private cloud platforms.
• Strengthen observability and proactive monitoring to identify and remediate potential failures before they result in production incidents.
• Establish engineering best practices across secure coding, automated testing, CI/CD, resiliency, performance, and production readiness.
• Participate in architecture and technical design reviews and influence engineering standards across Data Security.
• Mentor engineers and provide technical guidance across PKI, cryptography, secure software engineering, cloud-native development, and AI-enabled automation.
• Partner with Product, Architecture, Engineering, Cybersecurity, and Operations teams to deliver secure and resilient solutions.

Qualifications

• Bachelor’s degree in Computer Science, Computer Engineering, Software Engineering, or equivalent practical experience.
• 7+ years of professional software development experience.
• 2+ years of experience leading software developers, including technical mentoring and design guidance.
• 5+ years of experience within Financial Services or another highly regulated industry.
• 5+ years of experience developing APIs, microservices, or backend applications using Java, Python, Go, JavaScript/TypeScript, or similar languages.
• 5+ years of experience developing or consuming REST and/or SOAP services.
• 2+ years of hands-on experience with GCP, AWS, Azure, or private/hybrid cloud platforms.
• 2+ years of experience with Kubernetes, Docker/containerization, service mesh, or related cloud-native technologies.
• 2+ years of experience developing solutions involving PKI, symmetric/asymmetric cryptography, encryption, tokenization, digital certificates, or cryptographic key management.
• 2+ years of experience developing or integrating services using HashiCorp Vault, KMS, HSM, or comparable secrets/key management technologies.
• Hands-on experience integrating LLMs or Generative AI into applications, software engineering workflows, or operational automation.
• Hands-on experience with AI agents, Retrieval-Augmented Generation (RAG), LLM APIs, prompt engineering, agentic workflows, or similar Generative AI application patterns.
• Experience applying AI to engineering and operational use cases such as incident detection, root-cause analysis, vulnerability remediation, observability, automated remediation, or recovery.

Preferred Qualifications

• Deep understanding of PKI architecture, certificate lifecycle management, cryptographic key lifecycle management, TLS/mTLS, encryption, digital signatures, and secure communication protocols.
• Experience designing highly available enterprise PKI or cryptographic services.
• Experience integrating applications with HSMs, enterprise PKI, HashiCorp Vault, cloud KMS, and certificate management platforms.
• Strong understanding of API security, OAuth/OIDC, authentication, and authorization.
• Experience with DevSecOps, CI/CD, automated security testing, observability, and infrastructure automation.
• Understanding of security, privacy, access control, and responsible AI considerations for enterprise AI solutions.

Employment eligibility to work with American Express in the United States is required as the company will not pursue visa sponsorship for these positions.