Information Security Specialist-Cloud Security

At American Express, we know that with the right backing, people and businesses have the power to progress in incredible ways. Whether we're supporting our customers' financial confidence to move ahead, taking commerce to new heights, or encouraging people to explore the world, our colleagues are constantly redefining what's possible - and we're proud to back each other every step of the way.

When you join Team Amex, you become part of a diverse community of over 60,000 colleagues, all with a common goal to deliver an exceptional customer experience every day. Here, you'll learn and grow as we champion your meaningful career journey with programs, benefits, and flexibility to back you personally and professionally. Every colleague shares in the company's success.

Together, we'll win as a team, striving to uphold our company values and powerful backing promise to our customers, communities, and each other every day. And, we'll do it with integrity and in an environment where everyone is seen, heard and feels like they truly belong.

Join #TeamAmex and let's lead the way together.

Description:

American Express is embarking on an exciting Cloud and Mobile transformation led by a high-energy, delivery-focused team. This group is nimble and creative, with the power to define our technology and product roadmap.

You will drive Cloud Security capabilities, working with multi-functional and cross-enterprise teams that define requirements, develop architecture specifications, select and pilot new technologies, develop enterprise-scale deployment plans and lead initial implementations.

You will work closely with other Information Security departments, architecture and development teams, and external cloud providers on requirements, design, integration and delivery of these solutions.

Responsibilities Include:

• Provide security architectural leadership to the Cloud Program, including Infrastructure as a Service (IaaS), Platform as a Service (PaaS), and Cloud Application Architecture subprograms.
• Collaborate with enterprise architects and SMEs to deliver complete security architecture solutions.
• Lead the technical design and deployment of global projects including security solutions for internal and external IaaS and PaaS clouds.
• Capture requirements; build functional specifications, timelines, adoption plans and other artifacts to support security implementation.
• Build cloud-optimized architecture patterns and contribute to Enterprise Architecture governance.
• Evaluate various private, public cloud technologies and tools for technical, functional and financial feasibility.
• Drive proof of concepts that assess the suitability of solutions and demonstrate to our product partners how technology can be leveraged.
• Partner with and support the Engineering team to drive and execute results in a timely manner.

Required Skills/Expertise:

• Expertise in cloud architecture and security fundamentals including containers, software-defined networks, high availability design, multi-cloud, and serverless compute.
• Demonstrated experience in Agile environments, application design, software development, and testing.
• Application experience migrating to or building natively in a cloud environment including monolithic applications, microservices, and functions as a service.
• Experience with network architecture, network security, and TCP/IP.
• Experience with secure Java application design and development using J2EE, Spring, and SQL.
• Experience with secure JavaScript and Single Page App design and development using node.js, React, and NoSQL.
• 3+ years of experience in cloud security environment.
• Hands-on experience with Docker and Kubernetes preferred.
• Experience with a broad range of application architectures, languages, and payments technologies a plus.

Educational Requirements:

• Bachelor's Degree in computer science, computer engineering, or related field; advanced degree preferred.
• Information Security Certification preferred, CISSP or similar.

REQ# 22028171

As part of our diverse tech team, you can architect, code and ship software that makes us an essential part of our customers' digital lives. Here, you can work alongside talented engineers in an open, supportive, inclusive environment where your voice is valued, and you make your own decisions on what tech to use to solve challenging problems. Amex offers a range of opportunities to work with the latest technologies and encourages you to back the broader engineering community through open source. And because we understand the importance of keeping your skills fresh and relevant, we give you dedicated time to invest in your professional development. Find your place in technology on #TeamAmex.

We back our colleagues with the support they need to thrive, professionally and personally. That's why we have Amex Flex, our enterprise working model that provides greater flexibility to colleagues while ensuring we preserve the important aspects of our unique in-person culture. Depending on role and business needs, colleagues will either work onsite, in a hybrid model (combination of in-office and virtual days) or fully virtually.

If the role you are applying for is designated as hybrid or onsite, you will be required to demonstrate that you have completed your primary COVID-19 vaccination series (i.e., 2 doses for Moderna/Pfizer and 1 dose for J&J) in order to work in or visit any of our offices. This requirement is subject to legally required accommodations.

US Job Seekers/Employees - Click here to view the "EEO is the Law" poster and supplement and the Pay Transparency Policy Statement. If the links do not work, please copy and paste the following URLs in a new browser window: https://www.dol.gov/agencies/ofccp/posters to access the three posters.

Employment eligibility to work with American Express in the U.S. is required as the company will not pursue visa sponsorship for these positions.

American Express is an equal opportunity employer and makes employment decisions without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, protected veteran status, disability status, age, or any other status protected by law.