Information Security Specialist-Global Active Directory Infrastructure (Remote OR Hybrid)

You Lead the Way. We've Got Your Back. At American Express, we know that with the right backing, people and businesses have the power to progress in incredible ways. Whether we're supporting our customers' financial confidence to move ahead, taking commerce to new heights, or encouraging people to explore the world, our colleagues are constantly redefining what's possible - and we're proud to back each other every step of the way. When you join #TeamAmex, you become part of a diverse community of over 60,000 colleagues, all with a common goal to deliver an exceptional customer experience every day.

It's more than protecting systems and data.

It's protecting people.

Our Information Security Specialists know that security is a top priority for our business and our partners and customers. Today, as cyber-attacks increase and compliance is more rigorously enforced, we look to them to stay ahead of what's next and to protect our business and our future. So if you are dedicated to the latest technology and inspiring others, secure your career here.

Distributed Directory Services resides in the center of the Identity & Access Management organization. It lies within the core components of the concepts of IAM. The IAM Directory Services team has a global responsibility to provide service and support for the American Express Enterprise Directory with more than 100,000 users.

The Information Security Specialist- Distributed Directory Services Architecture/Engineering & Operations works with the Director of IAM Directory Services and will have operational and architectural responsibilities of American Express Enterprise Directory environment and associated management infrastructure.

We are looking for a highly skilled architecture / operations and performance subject matter expert who can provide strategic guidance and future vision regarding all aspects of daily operations and maintenance of the American Express Active Directory environment. You will be responsible for participating in the development of the enterprise directory services strategy. You will help to lead the operations team members by providing innovative solutions to improve the security and management of the Active Directory infrastructure. You will work with the team to challenge the status quo, constantly evaluate the current industry trends, and bring new capabilities to the Identity and Access Management organization.
Essential Functions:

• Provide senior level leadership (document, develop, plan, implement) of Active Directory Architecture / Operations and performance controls.
• Act as a senior technical SME in the areas of Active Directory - administration, infrastructure, process, procedures, monitoring, and projects.
• Provide senior technical expertise when necessary to maintain the Active Directory environment.
• Act as a manager between the Business Partner and vendor technical contacts.
• Provide leadership for a team of skilled SMEs in resolution of complex Active Directory service issues.
• Clearly communicate to key partners including senior leadership and internal/external audit teams.
• Promote and work with team members to implement process improvement initiatives.
• Lead expectations across functional teams, providing direction and mentorship in a matrix organization.

You won't just see the problem coming, you'll see the solution.

New threats to our business, and our customers appear on the horizon every day, so no two days are the same. But there are some things you can count on doing:

• Providing mentorship on information security processes, controls, and compliance, and information security risk management to team members
• Encouraging employee contribution, such as feedback, career development planning, and goal setting.
• Developing plans and strategies for information security tools, processes, and programs.
• Responding to changes in the regulatory environment and assisting other organizations in doing the same.
• Making strategic recommendations to improve information security, including processes, procedures, governance approaches, and compliance.

As part of our diverse tech team, you can architect, code and ship software that makes us an essential part of our customers' digital lives. Here, you can work alongside talented engineers in an open, supportive, inclusive environment where your voice is valued, and you make your own decisions on what tech to use to solve challenging problems. Amex offers a range of opportunities to work with the latest technologies and encourages you to back the broader engineering community through open source. And because we understand the importance of keeping your skills fresh and relevant, we give you dedicated time to invest in your professional development. Find your place in technology on #TeamAmex.

Minimum Qualifications:

• Bachelor's degree in Engineering/ Computer Science/ Information Systems or equivalent experience
• 3 + years in a role with a main focus of leading, maintaining, and securing a global Active Directory infrastructure
• Implementing Active Directory security standard methodologies including:
• Principle of least privilege.
• Credential theft prevention.
• Reducing the attack surface.
• Securing domain controllers.
• Experience writing sophisticated PowerShell automation scripts.
• Experience with Authentication protocols such as Kerberos, NTLM, Oauth, protocol security hardening, LDAP, Group Policy, DNS, Domain controller health and performance monitoring and issue resolution.
• Experience with Agile Practices, Emerging Technologies, Business Risk Management,
• Integration of non-Windows (Linux, MAC, etc.) computers with Active Directory.

Preferred Qualifications:

• Microsoft certifications including Microsoft Certified Systems Engineer (MCSE)
• Ability to think, communicate clearly, and make sound decisions while under pressure in a fast-paced environment.
• Possess ability to translate technical issues into understandable business language for end users and solution for those issues long-term
• CISSP, CISM, or CRISC certification
• Experience with operational tools such as MS Systems Center.
• Experience in highly regulated environments
• Teammate with a positive attitude and ability to work nights and weekends for issue resolution as needed
• Experience with Quest Active Role Server and Group Policy Object Administration
• Analytical Thinking
• Coaching and Mentoring

We back our colleagues with the support they need to thrive, professionally and personally. That's why we have Amex Flex, our enterprise working model that provides greater flexibility to colleagues while ensuring we preserve the important aspects of our unique in-person culture. Depending on role and business needs, colleagues will either work onsite, in a hybrid model (combination of in-office and virtual days) or fully virtually.

If the role you are applying for is designated as hybrid or onsite, you will be required to demonstrate that you have completed your primary COVID-19 vaccination series (i.e., 2 doses for Moderna/Pfizer and 1 dose for J&J) in order to work in or visit any of our offices. This requirement is subject to legally required accommodations.

Employment eligibility to work with American Express in the U.S. is required as the company will not pursue visa sponsorship for these positions.

American Express is an equal opportunity employer and makes employment decisions without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, protected veteran status, disability status, age, or any other status protected by law.