Sr Software Engineer I

American Express•New York, NY

About The Position

American Express is seeking a hands-on Senior Java Software Engineer to join the Enterprise Identity Team, which delivers secure, scalable, and reliable Identity and Access Management (IAM) solutions across the enterprise. The team designs, develops, and maintains identity solutions, authentication and authorization services, access management capabilities, and secure integrations across applications and platforms to protect enterprise systems, sensitive information, and digital identities. In this role, you will design, develop, and enhance enterprise-grade security applications and services, contribute to the technical direction of identity management solutions, and uphold standards for security, performance, scalability, and reliability. You will work with engineering, security, infrastructure, architecture, DevOps, and application development teams, and contribute to production support and ongoing improvements to critical identity services.

Requirements

Bachelor's degree in Computer Science, Information Systems, Software Engineering, or a related technical field, or equivalent professional experience.
At least 5 years of professional software development experience, with strong expertise in Java and enterprise application development.
Extensive experience designing and building scalable, distributed applications and microservices using Java, Spring Boot, and related technologies.
Strong understanding of object-oriented programming, data structures, algorithms, software design patterns, and clean code principles.
Experience designing, developing, and integrating RESTful APIs and enterprise web services.
Solid understanding of secure software development practices, application security principles, and enterprise security requirements.
Experience with authentication, authorization, access management, or IAM concepts.
Knowledge of modern authentication and authorization standards and protocols, such as OAuth 2.0, OpenID Connect (OIDC), SAML, or JWT.
Experience with automated build, deployment, and release management tools such as Maven, Git, Jenkins, and CI/CD pipelines.
Experience with relational and/or NoSQL databases and integration with enterprise applications.
Strong troubleshooting, debugging, performance optimization, and problem-solving skills.
Experience with unit testing, integration testing, test automation, and software quality assurance.
Ability to independently lead technical initiatives, contribute to architecture discussions, and deliver complex engineering solutions.
Strong communication and collaboration skills, including the ability to work effectively across engineering, security, and infrastructure teams.
Proactive approach focused on continuous improvement, innovation, security, and operational excellence.

Nice To Haves

Hands-on experience with enterprise IAM platforms and identity security solutions.
Experience integrating applications with identity providers, authentication services, and access management systems.
Familiarity with identity lifecycle management, provisioning, access governance, and privileged access management concepts.
Experience implementing OAuth 2.0, OpenID Connect, SAML, JWT, and secure API authentication mechanisms.
Experience with Docker, Kubernetes, and OpenShift-based application deployments.
Experience developing and maintaining cloud-native applications in enterprise environments.
Knowledge of security principles such as Zero Trust Architecture, least privilege, and defense in depth.
Experience with observability, application monitoring, logging, and production incident management.
Familiarity with DevSecOps practices, automated security scanning, and vulnerability remediation.
Experience mentoring engineers, conducting technical reviews, and driving engineering best practices across teams.

Responsibilities

Serve as a senior technical contributor on an Agile development team, promoting engineering excellence, secure coding, and high-quality delivery.
Design, develop, and maintain scalable, secure, highly available Java applications and microservices for enterprise IAM capabilities.
Build and enhance authentication, authorization, identity lifecycle management, and access control services.
Lead technical design discussions, contribute to architectural decisions, and align solutions with enterprise security standards and engineering best practices.
Develop and maintain secure RESTful APIs and integrations with enterprise applications, identity providers, and security platforms.
Apply security practices including secure authentication flows, role-based access control, least privilege, and protection of sensitive information.
Develop reliable and scalable identity services for critical business applications and enterprise security requirements.
Design, implement, and optimize CI/CD pipelines for automated builds, testing, security validation, and deployments.
Develop automation to improve operational efficiency, reduce manual processes, and increase identity and security service reliability.
Collaborate with Security Engineering, Infrastructure, Architecture, DevOps, and application development teams.
Conduct code reviews, provide technical guidance, and mentor junior and mid-level engineers.
Identify and address application vulnerabilities, performance bottlenecks, and technical debt through improvements and refactoring.
Develop unit tests, integration tests, and automated testing frameworks to support application quality, reliability, and security.
Support containerized applications and cloud-native deployments using Docker, OpenShift, and enterprise infrastructure platforms.
Troubleshoot complex production issues, conduct root cause analysis, and implement sustainable solutions to improve stability and availability.
Participate in production support and help maintain the availability, resilience, and security of critical identity management services.
Evaluate emerging technologies, security frameworks, and software engineering practices to improve enterprise identity solutions.
Promote collaboration across teams and influence technical decisions to deliver innovative, secure, and scalable solutions.