Sr Software Engineer I

American Express is looking for a highly skilled, hands-on Senior Java Software Engineer to join the Enterprise Identity Team , focused on delivering secure, scalable, and reliable Identity and Access Management (IAM) solutions across the enterprise.

The Enterprise Identity Team plays a critical role in strengthening American Express's security posture by designing, developing, and maintaining enterprise identity solutions, authentication and authorization services, access management capabilities, and secure integrations across applications and platforms.

Our team is committed to protecting enterprise systems, sensitive information, and digital identities through innovative security technologies, robust engineering practices, and continuous improvements to identity security infrastructure.

As a Senior Java Software Engineer, you will be an integral part of designing, developing, and enhancing enterprise-grade security applications and services. You will contribute to the technical direction of identity management solutions while ensuring high standards of security, performance, scalability, and reliability.

Serve as a senior technical contributor within an Agile development team, driving engineering excellence, secure coding practices, and high-quality software delivery.

Design, develop, and maintain scalable, secure, and highly available Java-based applications and microservices supporting enterprise Identity and Access Management (IAM) capabilities.

Build and enhance authentication, authorization, identity lifecycle management, and access control services to strengthen enterprise security.

Lead technical design discussions, contribute to architectural decisions, and ensure solutions align with enterprise security standards and engineering best practices.

Develop and maintain secure RESTful APIs and integrations with enterprise applications, identity providers, and security platforms.

Implement security best practices, including secure authentication flows, role-based access control (RBAC), least-privilege principles, and protection of sensitive information.

Drive the development of reliable and scalable identity services that support critical business applications and enterprise security requirements.

Design, implement, and optimize CI/CD pipelines to enable automated builds, testing, security validation, and application deployments.

Develop automation solutions to improve operational efficiency, reduce manual processes, and enhance the reliability of identity and security services.

Collaborate with Security Engineering, Infrastructure, Architecture, DevOps, and application development teams to deliver secure, integrated enterprise solutions.

Conduct code reviews, provide technical guidance, and mentor junior and mid-level engineers to promote engineering excellence.

Identify and address application vulnerabilities, performance bottlenecks, and technical debt through proactive improvements and code refactoring.

Develop comprehensive unit tests, integration tests, and automated testing frameworks to ensure application quality, reliability, and security.

Support containerized applications and cloud-native deployments using Docker, OpenShift, and enterprise infrastructure platforms.

Troubleshoot complex production issues, perform root cause analysis, and implement sustainable solutions to improve system stability and availability.

Participate in production support activities and ensure the ongoing availability, resilience, and security of critical identity management services.

Continuously evaluate emerging technologies, security frameworks, and software engineering practices to improve enterprise identity solutions.

Promote collaboration across teams, influence technical decisions, and challenge existing approaches to deliver innovative, secure, and scalable solutions.

Bachelor's degree in Computer Science, Information Systems, Software Engineering, or a related technical field, or equivalent professional experience.

5+ years of professional software development experience, with strong expertise in Java and enterprise application development.

Extensive experience designing and building scalable, distributed applications and microservices using Java, Spring Boot, and related technologies.

Strong understanding of object-oriented programming, data structures, algorithms, software design patterns, and clean code principles.

Experience designing, developing, and integrating RESTful APIs and enterprise web services.

Solid understanding of secure software development practices, application security principles, and enterprise security requirements.

Experience working with authentication, authorization, access management, or Identity and Access Management (IAM) concepts.

Knowledge of modern authentication and authorization standards and protocols, such as OAuth 2.0, OpenID Connect (OIDC), SAML, or JWT.

Experience with automated build, deployment, and release management tools such as Maven, Git, Jenkins, and CI/CD pipelines.

Experience with relational and/or NoSQL databases and their integration with enterprise applications.

Strong troubleshooting, debugging, performance optimization, and problem-solving skills.

Experience with unit testing, integration testing, test automation, and software quality assurance.

Ability to independently lead technical initiatives, contribute to architecture discussions, and deliver complex engineering solutions.

Strong communication and collaboration skills, with the ability to work effectively across engineering, security, and infrastructure teams.

Proactive mindset focused on continuous improvement, innovation, security, and operational excellence.

Preferred Qualifications

Hands-on experience with enterprise Identity and Access Management platforms and identity security solutions.

Experience integrating applications with identity providers, authentication services, and access management systems.

Familiarity with identity lifecycle management, provisioning, access governance, and privileged access management concepts.

Experience implementing OAuth 2.0, OpenID Connect, SAML, JWT, and secure API authentication mechanisms.

Experience with Docker, Kubernetes, and OpenShift-based application deployments.

Experience developing and maintaining cloud-native applications in enterprise environments.

Knowledge of security principles such as Zero Trust Architecture, least privilege, and defense in depth.

Experience with observability, application monitoring, logging, and production incident management.

Familiarity with DevSecOps practices, automated security scanning, and vulnerability remediation.

Experience mentoring engineers, conducting technical reviews, and driving engineering best practices across teams.