Senior Software Engineer I

INFRASTRUCTURE AS CODE ENGINEER – MULTI-CLOUD

We are seeking an experienced Infrastructure as Code (IaC) Engineer to design,

automate, and secure scalable infrastructure across GCP, AWS, and Azure. The

role requires strong expertise in Terraform, cloud networking, network security,

IAM, Kubernetes networking, and API gateways.

The engineer will build reusable IaC modules and secure multi-cloud patterns,

implement network and security controls, automate infrastructure through CI/CD

and policy-as-code, and establish standardized self-service capabilities for

engineering teams. The role will also support AI and agentic enablement,

orchestrating secure connectivity, identity, API/tool access, and infrastructure

patterns for deploying agentic workloads across multi-cloud environments.

RESPONSIBILITIES

* 7+ years of infrastructure engineering experience with strong expertise in

Infrastructure as Code (IaC) using Terraform, OpenTofu, or similar

frameworks.

* 7+ years of hands-on experience designing and automating infrastructure

across Google Cloud Platform (GCP), AWS, and/or Azure, with an emphasis on

reusable, standardized multi-cloud patterns.

* Strong knowledge of cloud networking, including VPC/VNet architecture,

subnets, routing, DNS, NAT, load balancing, private connectivity, peering,

transit architectures, VPN, and dedicated interconnects.

* Deep understanding of network security, including security groups, firewall

policies/rules, network ACLs, micro-segmentation, ingress/egress controls,

private endpoints, and Zero Trust principles.

* Proven experience implementing network segmentation and isolation patterns

across applications, environments, business units, and cloud platforms.

* Strong experience with API gateways and API infrastructure, including secure

ingress/egress, authentication and authorization, rate limiting, routing,

policy enforcement, private APIs, and service-to-service connectivity.

* Experience designing secure connectivity for Kubernetes and containerized

workloads, including GKE/EKS/AKS networking, network policies, service

ingress/egress, and workload isolation.

* Strong understanding of IAM, secrets management, encryption,

certificates/PKI, and cloud security architecture, with the ability to

integrate these controls into IaC modules and deployment pipelines.

* Proven experience building enterprise-grade reusable Terraform modules,

policy-driven infrastructure patterns, CI/CD integrations, automated testing,

and infrastructure governance.

* Experience designing and operating large-scale, highly available, resilient

multi-cloud infrastructure using standardized automation and security

controls.

* Strong understanding of distributed systems, microservices,

service-to-service communication, and modern application connectivity

patterns.

* Experience enabling AI/agentic workloads in multi-cloud environments,

including secure agent-to-API/tool connectivity, identity and authorization,

controlled network access, API gateway integration, secrets handling, and

infrastructure automation for agentic platforms.

QUALIFICATIONS

* Experience developing multi-cloud network and security architectures spanning

GCP, AWS, Azure, on-premises, and SaaS environments.

* Experience building IaC platform capabilities such as reusable modules,

golden patterns, self-service infrastructure, policy-as-code, automated

compliance, and developer enablement.

* Experience with network security platforms and cloud-native controls, such as

Cloud NGFW/firewalls, AWS Network Firewall, Azure Firewall, WAF, IDS/IPS,

secure web gateways, and service mesh technologies.

* Experience with API management platforms such as Apigee, AWS API Gateway,

Azure API Management, Kong, or equivalent technologies.

* Knowledge of Zero Trust, least privilege, defense-in-depth,

micro-segmentation, and secure-by-default infrastructure design.

* Experience with policy-as-code and security automation using technologies

such as OPA, Sentinel, organization policies, IAM policies, and automated IaC

security scanning.

* Experience with FinOps and cloud cost optimization, particularly network,

data-transfer, NAT, load-balancing, API, and multi-cloud connectivity costs.

* Experience enabling agentic AI platforms and AI infrastructure, including

secure access to enterprise APIs, MCP/tool integrations, agent identity,

guardrails, observability, and controlled cross-cloud connectivity.

* Experience establishing IaC standards and governance for AI/agentic

infrastructure, enabling engineering teams to provision secure networking,

APIs, compute, identity, and security controls through reusable modules.

* Relevant certifications such as HashiCorp Terraform Associate, GCP

Professional Cloud Network Engineer/Cloud Architect/Cloud Security Engineer,

AWS Advanced Networking or Security Specialty, or Azure Network/Security

certifications.

Employment eligibility to work with American Express in the United States is

required as the company will not pursue visa sponsorship for these positions.

At American Express, our culture is built on a 175-year history of

innovation, shared values

[https://www.americanexpress.com/en-us/company/who-we-are/]and Leadership

Behaviors, and an unwavering commitment to back our customers, communities, and

colleagues. From delivering differentiated products to providing world-class

customer service, we operate with a strong risk mindset, ensuring we continue to

uphold our brand promise of trust, security, and service.

As part of Team Amex, you’ll experience our powerful backing with comprehensive

support for your holistic well-being and many opportunities to learn new skills,

develop as a leader, and grow your career. Here, your voice and ideas matter,

your work makes an impact, and together, you will help us define the future of

American Express.

We back you with benefits that support your holistic well-being so you can be

and deliver your best. This means caring for you and your loved ones' physical,

financial, and mental health, as well as providing the flexibility you need to

thrive personally and professionally:

* Competitive base salaries

* Bonus incentives

* 6% Company Match on retirement savings plan

* Free financial coaching and financial well-being support

* Comprehensive medical, dental, vision, life insurance, and disability

benefits

* Flexible working model with hybrid, onsite or virtual arrangements depending

on role and business need

* 20+ weeks paid parental leave for all parents, regardless of gender, offered

for pregnancy, adoption or surrogacy

* Free access to global on-site wellness centers staffed with nurses and

doctors (depending on location)

* Free and confidential counseling support through our Healthy Minds program

* Career development and training opportunities

For a full list of Team Amex benefits, visit our Colleague Benefits Site

[https://www.americanexpress.com/en-us/colleagues/benefits].

American Express is an equal opportunity employer and makes employment decisions

without regard to race, color, religion, sex, sexual orientation, gender

identity, national origin, veteran status, disability status, age, or any other

status protected by law. American Express will consider for employment all

qualified applicants, including those with arrest or conviction records, in

accordance with the requirements of applicable state and local laws, including

the California Fair Chance Act, the Los Angeles County Fair Chance Ordinance for

Employers, and the City of Los Angeles’ Fair Chance Initiative for Hiring

Ordinance. For positions covered by federal and/or state banking regulations,

American Express will comply with such regulations as it relates to the

consideration of applicants with criminal convictions.

We back our colleagues with the support they need to thrive, professionally and

personally. That's why we have Amex Flex, our enterprise working model that

provides greater flexibility to colleagues while ensuring we preserve the

important aspects of our unique in-person culture. Depending on role and

business needs, colleagues will either work onsite, in a hybrid model

(combination of in-office and virtual days) or fully virtually.

US Job Seekers - Click to view the “Know Your Rights

[https://www.eeoc.gov/poster]” poster. If the link does not work, you may access

the poster by copying and pasting the following URL in a new browser window:

https://www.eeoc.gov/poster.

The below represents the expected salary range for this job requisition.

Ultimately, in determining your pay, we’ll consider your location, experience,

and other job-related factors.