Sr Software Engineer I

American Express is looking for a highly skilled, hands-on

Senior Java Software Engineer

to join the

Enterprise Identity Team , focused on delivering secure, scalable, and reliable Identity and Access Management (IAM) solutions across the enterprise.

The Enterprise Identity Team plays a critical role in strengthening American Express's security posture by designing, developing, and maintaining enterprise identity solutions, authentication and authorization services, access management capabilities, and secure integrations across applications and platforms.

Our team is committed to protecting enterprise systems, sensitive information, and digital identities through innovative security technologies, robust engineering practices, and continuous improvements to identity security infrastructure. As a Senior Java Software Engineer, you will be an integral part of designing, developing, and enhancing enterprise-grade security applications and services. You will contribute to the technical direction of identity management solutions while ensuring high standards of security, performance, scalability, and reliability. Responsibilities

Serve as a senior technical contributor within an Agile development team, driving engineering excellence, secure coding practices, and high-quality software delivery.

Design, develop, and maintain scalable, secure, and highly available Java-based applications and microservices supporting enterprise Identity and Access Management (IAM) capabilities.

Build and enhance authentication, authorization, identity lifecycle management, and access control services to strengthen enterprise security.

Lead technical design discussions, contribute to architectural decisions, and ensure solutions align with enterprise security standards and engineering best practices.

Develop and maintain secure RESTful APIs and integrations with enterprise applications, identity providers, and security platforms.

Implement security best practices, including secure authentication flows, role-based access control (RBAC), least-privilege principles, and protection of sensitive information.

Drive the development of reliable and scalable identity services that support critical business applications and enterprise security requirements.

Design, implement, and optimize CI/CD pipelines to enable automated builds, testing, security validation, and application deployments.

Develop automation solutions to improve operational efficiency, reduce manual processes, and enhance the reliability of identity and security services.

Collaborate with Security Engineering, Infrastructure, Architecture, DevOps, and application development teams to deliver secure, integrated enterprise solutions.

Conduct code reviews, provide technical guidance, and mentor junior and mid-level engineers to promote engineering excellence.

Identify and address application vulnerabilities, performance bottlenecks, and technical debt through proactive improvements and code refactoring.

Develop comprehensive unit tests, integration tests, and automated testing frameworks to ensure application quality, reliability, and security.

Support containerized applications and cloud-native deployments using Docker, OpenShift, and enterprise infrastructure platforms.

Troubleshoot complex production issues, perform root cause analysis, and implement sustainable solutions to improve system stability and availability.

Participate in production support activities and ensure the ongoing availability, resilience, and security of critical identity management services.

Continuously evaluate emerging technologies, security frameworks, and software engineering practices to improve enterprise identity solutions.

Promote collaboration across teams, influence technical decisions, and challenge existing approaches to deliver innovative, secure, and scalable solutions.

Qualifications

Bachelor's degree in Computer Science, Information Systems, Software Engineering, or a related technical field, or equivalent professional experience.

5+ years of professional software development experience, with strong expertise in Java and enterprise application development.

Extensive experience designing and building scalable, distributed applications and microservices using Java, Spring Boot, and related technologies.

Strong understanding of object-oriented programming, data structures, algorithms, software design patterns, and clean code principles.

Experience designing, developing, and integrating RESTful APIs and enterprise web services.

Solid understanding of secure software development practices, application security principles, and enterprise security requirements.

Experience working with authentication, authorization, access management, or Identity and Access Management (IAM) concepts.

Knowledge of modern authentication and authorization standards and protocols, such as OAuth 2.0, OpenID Connect (OIDC), SAML, or JWT.

Experience with automated build, deployment, and release management tools such as Maven, Git, Jenkins, and CI/CD pipelines.

Experience with relational and/or NoSQL databases and their integration with enterprise applications.

Strong troubleshooting, debugging, performance optimization, and problem-solving skills.

Experience with unit testing, integration testing, test automation, and software quality assurance.

Ability to independently lead technical initiatives, contribute to architecture discussions, and deliver complex engineering solutions.

Strong communication and collaboration skills, with the ability to work effectively across engineering, security, and infrastructure teams.

Proactive mindset focused on continuous improvement, innovation, security, and operational excellence.

Preferred Qualifications

Hands-on experience with enterprise Identity and Access Management platforms and identity security solutions.

Experience integrating applications with identity providers, authentication services, and access management systems.

Familiarity with identity lifecycle management, provisioning, access governance, and privileged access management concepts.

Experience implementing OAuth 2.0, OpenID Connect, SAML, JWT, and secure API authentication mechanisms.

Experience with Docker, Kubernetes, and OpenShift-based application deployments.

Experience developing and maintaining cloud-native applications in enterprise environments.

Knowledge of security principles such as Zero Trust Architecture, least privilege, and defense in depth.

Experience with observability, application monitoring, logging, and production incident management.

Familiarity with DevSecOps practices, automated security scanning, and vulnerability remediation.

Experience mentoring engineers, conducting technical reviews, and driving engineering best practices across teams.

At American Express, our culture is built on a 175-year history of innovation, shared values and Leadership Behaviors, and an unwavering commitment to back our customers, communities, and colleagues. From delivering differentiated products to providing world-class customer service, we operate with a strong risk mindset, ensuring we continue to uphold our brand promise of trust, security, and service. As part of Team Amex, you’ll experience our powerful backing with comprehensive support for your holistic well-being and many opportunities to learn new skills, develop as a leader, and grow your career. Here, your voice and ideas matter, your work makes an impact, and together, you will help us define the future of American Express.

We back you with benefits that support your holistic well-being so you can be and deliver your best. This means caring for you and your loved ones' physical, financial, and mental health, as well as providing the flexibility you need to thrive personally and professionally: Competitive base salaries Bonus incentives 6% Company Match on retirement savings plan Free financial coaching and financial well-being support Comprehensive medical, dental, vision, life insurance, and disability benefits Flexible working model with hybrid, onsite or virtual arrangements depending on role and business need 20+ weeks paid parental leave for all parents, regardless of gender, offered for pregnancy, adoption or surrogacy Free access to global on-site wellness centers staffed with nurses and doctors (depending on location) Free and confidential counseling support through our Healthy Minds program Career development and training opportunities For a full list of Team Amex benefits, visit our Colleague Benefits Site. American Express is an equal opportunity employer and makes employment decisions without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, veteran status, disability status, age, or any other status protected by law. American Express will consider for employment all qualified applicants, including those with arrest or conviction records, in accordance with the requirements of applicable state and local laws, including the California Fair Chance Act, the Los Angeles County Fair Chance Ordinance for Employers, and the City of Los Angeles’ Fair Chance Initiative for Hiring Ordinance. For positions covered by federal and/or state banking regulations, American Express will comply with such regulations as it relates to the consideration of applicants with criminal convictions. We back our colleagues with the support they need to thrive, professionally and personally. That's why we have Amex Flex, our enterprise working model that provides greater flexibility to colleagues while ensuring we preserve the important aspects of our unique in-person culture. Depending on role and business needs, colleagues will either work onsite, in a hybrid model (combination of in-office and virtual days) or fully virtually. US Job Seekers - Click to view the “Know Your Rights” poster. If the link does not work, you may access the poster by copying and pasting the following URL in a new browser window: The below represents the expected salary range for this job requisition. Ultimately, in determining your pay, we’ll consider your location, experience, and other job-related factors.​