Sr Software Engineer I

American Express•New York, NY

7h•$123,000 - $215,250

About The Position

American Express is seeking a hands-on Senior Java Software Engineer for its Enterprise Identity Team, which designs, develops, and maintains enterprise identity solutions, authentication and authorization services, access management capabilities, and secure integrations. The team works to strengthen security and protect enterprise systems, sensitive information, and digital identities through robust engineering and ongoing improvements to identity security infrastructure. In this role, you will design, develop, and enhance enterprise-grade security applications and services, contribute to the technical direction of identity management solutions, and uphold high standards for security, performance, scalability, and reliability. You will work across engineering, security, infrastructure, architecture, DevOps, and application development teams, supporting critical identity services through development, deployment, and production operations.

Requirements

Bachelor's degree in Computer Science, Information Systems, Software Engineering, or a related technical field, or equivalent professional experience.
At least 5 years of professional software development experience, with strong Java and enterprise application development expertise.
Extensive experience designing and building scalable distributed applications and microservices using Java, Spring Boot, and related technologies.
Strong understanding of object-oriented programming, data structures, algorithms, software design patterns, and clean code principles.
Experience designing, developing, and integrating RESTful APIs and enterprise web services.
Understanding of secure software development practices, application security principles, and enterprise security requirements.
Experience with authentication, authorization, access management, or IAM concepts.
Knowledge of authentication and authorization standards and protocols such as OAuth 2.0, OpenID Connect (OIDC), SAML, or JWT.
Experience with automated build, deployment, and release management tools such as Maven, Git, Jenkins, and CI/CD pipelines.
Experience with relational and/or NoSQL databases and their integration with enterprise applications.
Strong troubleshooting, debugging, performance optimization, and problem-solving skills.
Experience with unit testing, integration testing, test automation, and software quality assurance.
Ability to independently lead technical initiatives, contribute to architecture discussions, and deliver complex engineering solutions.
Strong communication and collaboration skills, including the ability to work across engineering, security, and infrastructure teams.
Proactive approach to continuous improvement, innovation, security, and operational excellence.

Nice To Haves

Hands-on experience with enterprise IAM platforms and identity security solutions.
Experience integrating applications with identity providers, authentication services, and access management systems.
Familiarity with identity lifecycle management, provisioning, access governance, and privileged access management.
Experience implementing OAuth 2.0, OpenID Connect, SAML, JWT, and secure API authentication mechanisms.
Experience with Docker, Kubernetes, and OpenShift-based application deployments.
Experience developing and maintaining cloud-native applications in enterprise environments.
Knowledge of Zero Trust Architecture, least privilege, and defense in depth.
Experience with observability, application monitoring, logging, and production incident management.
Familiarity with DevSecOps practices, automated security scanning, and vulnerability remediation.
Experience mentoring engineers, conducting technical reviews, and promoting engineering best practices across teams.

Responsibilities

Serve as a senior technical contributor on an Agile team, promoting engineering excellence, secure coding, and high-quality software delivery.
Design, develop, and maintain scalable, secure, highly available Java applications and microservices for enterprise IAM capabilities.
Build and enhance authentication, authorization, identity lifecycle management, and access control services.
Lead technical design discussions and contribute to architectural decisions that align with enterprise security standards and engineering best practices.
Develop and maintain secure RESTful APIs and integrations with enterprise applications, identity providers, and security platforms.
Apply security practices including secure authentication flows, role-based access control, least privilege, and protection of sensitive information.
Develop reliable and scalable identity services for critical business applications and enterprise security requirements.
Design, implement, and optimize CI/CD pipelines for automated builds, testing, security validation, and deployments.
Develop automation to improve operational efficiency, reduce manual processes, and increase service reliability.
Collaborate with Security Engineering, Infrastructure, Architecture, DevOps, and application development teams.
Conduct code reviews, provide technical guidance, and mentor junior and mid-level engineers.
Identify and address vulnerabilities, performance bottlenecks, and technical debt through improvements and refactoring.
Develop unit tests, integration tests, and automated testing frameworks to support application quality, reliability, and security.
Support containerized applications and cloud-native deployments using Docker, OpenShift, and enterprise infrastructure platforms.
Troubleshoot complex production issues, perform root cause analysis, and implement sustainable stability and availability improvements.
Participate in production support and maintain the availability, resilience, and security of critical identity management services.
Evaluate emerging technologies, security frameworks, and software engineering practices to improve enterprise identity solutions.
Promote cross-team collaboration, influence technical decisions, and challenge existing approaches to deliver secure, innovative, scalable solutions.

Benefits

Competitive base salaries
Bonus incentives
6% company match on retirement savings plan
Free financial coaching and financial well-being support
Comprehensive medical, dental, vision, life insurance, and disability benefits
Flexible working model, with hybrid, onsite, or virtual arrangements depending on role and business need
20+ weeks of paid parental leave for all parents, including for pregnancy, adoption, or surrogacy
Free access to global onsite wellness centers staffed with nurses and doctors, depending on location
Free and confidential counseling support through the Healthy Minds program
Career development and training opportunities