Senior Manager- Cyber Security Engineering (Architecture as Code creation and review for Data Security/ Encryption/ Secrets management/ Tokenization capabilities)

American Express • Phoenix, AZ

7h

About The Position

The Technology organization enables and accelerates the company’s growth strategies, delivering global capabilities and services in support of Amex’s customers and colleagues, while maintaining 24/7 servicing and availability to ensure an uninterrupted, high-quality customer experience. Technology provides the foundation for everything we do in the company while driving differentiation through building and leveraging innovative technology and data insights. At American Express, our mission is to deliver the world’s best customer experience every day. At the heart of this mission is our Information Security organization, enabling exceptional experiences built on a foundation of trust, service, and security. We leverage advanced technologies and data-driven insights to stay ahead of an evolving threat landscape. We foster a culture of passion, curiosity, and courage—empowering you to innovate, grow, and help shape the future of a Fortune 100 company. Trust. Service. Security. The Sr. Manager, Cybersecurity Engineering is a hands-on engineering role responsible for designing, building, and continuously evolving Security Architecture as Code for the Data Security organization. This role transforms enterprise security standards, encryption patterns, and control objectives into reusable engineering assets that enable development teams to build secure, compliant solutions by default. Working at the intersection of software engineering, security architecture, AI, and developer enablement, this role develops reusable frameworks, bootstrap code, reference implementations, engineering libraries, and AI-assisted development assets that improve engineering quality, accelerate delivery, and increase consistency across multiple development teams. As a key contributor to our transformation to a product-driven Data Security organization, this role partners closely with Product Owners, Technical Project Managers, Engineering Operations, and software engineering teams to ensure security standards are embedded directly into the software development lifecycle and become fundamental to everyday engineering practices.

Requirements

• 5–7 years of experience in software engineering, cybersecurity engineering, platform engineering, or security engineering.
• Strong software development experience with modern programming languages and cloud-native application development.
• Experience implementing enterprise security capabilities such as encryption, key management, authentication, authorization, secrets management, tokenization, PKI, or related security technologies.
• Experience developing reusable software frameworks, libraries, APIs, SDKs, or engineering platforms.
• Experience performing technical code reviews and providing engineering guidance to development teams.
• Hands-on experience leveraging AI development tools such as GitHub Copilot, ChatGPT, Claude, or similar technologies to improve engineering productivity and software quality.
• Strong understanding of Agile software development, DevSecOps, CI/CD pipelines, and modern engineering practices.
• Excellent communication and collaboration skills with the ability to coach engineers and influence technical direction across multiple teams.

Nice To Haves

• Experience building internal developer platforms or engineering enablement capabilities.
• Experience developing reusable Architecture as Code, Infrastructure as Code, or Policy as Code solutions.
• Experience building security services or developer-facing security platforms.
• Familiarity with developer experience (DevEx) principles and engineering productivity metrics.
• Experience working in large-scale enterprise software engineering organizations.

Responsibilities

• Design, develop, and maintain Security Architecture as Code that enables engineering teams to rapidly implement enterprise security standards.
• Translate enterprise architecture standards, security control objectives, encryption patterns, and engineering requirements into reusable frameworks, libraries, bootstrap code, and reference implementations.
• Develop engineering accelerators that make the secure path the easiest path for developers through reusable code, templates, and automation.
• Leverage AI to accelerate software engineering by generating reusable code patterns, implementation examples, architecture guidance, technical documentation, and developer playbooks.
• Continuously evaluate emerging AI capabilities and integrate them into engineering workflows to improve developer productivity, software quality, and implementation consistency.
• Partner with Engineering Operations to embed Security Architecture as Code into developer platforms, engineering pipelines, CI/CD processes, and standard development practices.
• Perform architecture-focused code reviews to validate alignment with enterprise standards while identifying opportunities to improve reusable engineering assets.
• Develop secure reference implementations and code examples that simplify adoption of encryption, key management, authentication, authorization, secrets management, and other enterprise security capabilities.
• Coach engineering teams on secure coding practices, AI-assisted software development, reusable architecture patterns, and engineering best practices.
• Measure adoption and effectiveness of reusable engineering assets, continuously improving developer experience, engineering productivity, implementation quality, and delivery velocity.
• Collaborate across multiple Scrum teams to identify common engineering challenges and develop reusable solutions that eliminate duplication and improve consistency.
• Contribute to the evolution of enterprise engineering standards by incorporating lessons learned, emerging technologies, AI capabilities, and engineering feedback into reusable Security Architecture as Code assets.

Benefits

• Success in this role will be measured by: Adoption of Security Architecture as Code assets across engineering teams.
• Increased developer productivity through reusable engineering frameworks and AI-assisted development.
• Improved consistency and quality of enterprise security control implementation.
• Reduction in engineering rework and implementation variability.
• Increased engineering velocity through reusable code, automation, and AI-enabled development practices.
• Positive developer feedback and adoption of reusable engineering assets.
• Improved scalability of secure software delivery across the Data Security organization.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior
• Education Level: No Education Listed