Sr Software Engineer I

American Express is looking for a highly skilled, hands-on Senior Java Software Engineer to join the Enterprise Identity Team , focused on delivering secure, scalable, and reliable Identity and Access Management (IAM) solutions across the enterprise.

The Enterprise Identity Team plays a critical role in strengthening American Express's security posture by designing, developing, and maintaining enterprise identity solutions, authentication and authorization services, access management capabilities, and secure integrations across applications and platforms.

Our team is committed to protecting enterprise systems, sensitive information, and digital identities through innovative security technologies, robust engineering practices, and continuous improvements to identity security infrastructure.
As a Senior Java Software Engineer, you will be an integral part of designing, developing, and enhancing enterprise-grade security applications and services. You will contribute to the technical direction of identity management solutions while ensuring high standards of security, performance, scalability, and reliability.

- Bachelor's degree in Computer Science, Information Systems, Software Engineering, or a related technical field, or equivalent professional experience.
- 5+ years of professional software development experience, with strong expertise in Java and enterprise application development.
- Extensive experience designing and building scalable, distributed applications and microservices using Java, Spring Boot, and related technologies.
- Strong understanding of object-oriented programming, data structures, algorithms, software design patterns, and clean code principles.
- Experience designing, developing, and integrating RESTful APIs and enterprise web services.
- Solid understanding of secure software development practices, application security principles, and enterprise security requirements.
- Experience working with authentication, authorization, access management, or Identity and Access Management (IAM) concepts.
- Knowledge of modern authentication and authorization standards and protocols, such as OAuth 2.0, OpenID Connect (OIDC), SAML, or JWT.
- Experience with automated build, deployment, and release management tools such as Maven, Git, Jenkins, and CI/CD pipelines.
- Experience with relational and/or NoSQL databases and their integration with enterprise applications.
- Strong troubleshooting, debugging, performance optimization, and problem-solving skills.
- Experience with unit testing, integration testing, test automation, and software quality assurance.
- Ability to independently lead technical initiatives, contribute to architecture discussions, and deliver complex engineering solutions.
- Strong communication and collaboration skills, with the ability to work effectively across engineering, security, and infrastructure teams.
- Proactive mindset focused on continuous improvement, innovation, security, and operational excellence.
- Preferred Qualifications
- Hands-on experience with enterprise Identity and Access Management platforms and identity security solutions.
- Experience integrating applications with identity providers, authentication services, and access management systems.
- Familiarity with identity lifecycle management, provisioning, access governance, and privileged access management concepts.
- Experience implementing OAuth 2.0, OpenID Connect, SAML, JWT, and secure API authentication mechanisms.
- Experience with Docker, Kubernetes, and OpenShift-based application deployments.
- Experience developing and maintaining cloud-native applications in enterprise environments.
- Knowledge of security principles such as Zero Trust Architecture, least privilege, and defense in depth.
- Experience with observability, application monitoring, logging, and production incident management.
- Familiarity with DevSecOps practices, automated security scanning, and vulnerability remediation.
- Experience mentoring engineers, conducting technical reviews, and driving engineering best practices across teams.