Senior Software Engineer

American Express

. Design, automate, and secure scalable infrastructure across GCP, AWS, and Azure .

Posted 9/15/2026full-timePhoenix • Arizona • United StatesSenior💰 $123,000 - $215,250 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates extensive expertise in Infrastructure as Code (IaC) using Terraform and multi-cloud infrastructure design across GCP, AWS, and Azure. Proficient in implementing security controls, automating infrastructure, and establishing governance for AI-enabled environments.

Highest-signal resume keywords

Infrastructure As Code (IaC)TerraformMulti-Cloud Infrastructure DesignNetwork Security ArchitecturePolicy-As-Code

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Infrastructure EngineeringCloud Security ControlsCI/CD AutomationAPI ManagementNetwork Security PlatformsCloud Cost OptimizationZero Trust ArchitectureAutomated ComplianceSecrets ManagementEncryption

Tools & Technologies

Google Cloud Platform (GCP)Amazon Web Services (AWS)Microsoft AzureOpenTofuApigeeAWS API GatewayAzure API ManagementKongCloud NGFWService Mesh Technologies

Certifications & Qualifications

HashiCorp Terraform AssociateGCP Professional Cloud Network EngineerGCP Professional Cloud ArchitectGCP Professional Cloud Security EngineerAWS Advanced Networking SpecialtyAWS Security SpecialtyAzure Network CertificationAzure Security Certification

Industry Keywords

Infrastructure AutomationAgentic AI PlatformsSecure ConnectivityMicro-SegmentationDefense-In-DepthSelf-Service InfrastructureAutomated IaC Security ScanningDeveloper EnablementCloud-Native ControlsCompliance Standards

Tech Stack

Tools & technologies

AWSAzureCloudFirewallsGoogle Cloud PlatformKubernetesTerraform

About the role

Key responsibilities & impact

Design, automate, and secure scalable infrastructure across GCP, AWS, and Azure
Build reusable IaC modules and secure multi-cloud patterns
Implement network and security controls
Automate infrastructure through CI/CD and policy-as-code
Establish standardized self-service capabilities for engineering teams
Support AI and agentic enablement by orchestrating secure connectivity, identity, API/tool access, and infrastructure patterns
Design and operate large-scale, highly available, resilient multi-cloud infrastructure
Enable secure connectivity for Kubernetes and containerized workloads
Integrate IAM, secrets management, encryption, certificates/PKI, and cloud security controls into IaC modules and deployment pipelines
Establish IaC standards and governance for AI/agentic infrastructure

Requirements

What you’ll need

7+ years of infrastructure engineering experience with strong expertise in Infrastructure as Code (IaC) using Terraform, OpenTofu, or similar frameworks
7+ years of hands-on experience designing and automating infrastructure across Google Cloud Platform (GCP), AWS, and/or Azure
Experience developing multi-cloud network and security architectures spanning GCP, AWS, Azure, on-premises, and SaaS environments
Experience building IaC platform capabilities such as reusable modules, golden patterns, self-service infrastructure, policy-as-code, automated compliance, and developer enablement
Experience with network security platforms and cloud-native controls, including Cloud NGFW/firewalls, AWS Network Firewall, Azure Firewall, WAF, IDS/IPS, secure web gateways, and service mesh technologies
Experience with API management platforms such as Apigee, AWS API Gateway, Azure API Management, Kong, or equivalent technologies
Knowledge of Zero Trust, least privilege, defense-in-depth, micro-segmentation, and secure-by-default infrastructure design
Experience with policy-as-code and security automation using OPA, Sentinel, organization policies, IAM policies, and automated IaC security scanning
Experience with FinOps and cloud cost optimization
Experience enabling agentic AI platforms and AI infrastructure, including secure access to enterprise APIs, MCP/tool integrations, agent identity, guardrails, observability, and controlled cross-cloud connectivity
Relevant certifications such as HashiCorp Terraform Associate, GCP Professional Cloud Network Engineer/Cloud Architect/Cloud Security Engineer, AWS Advanced Networking or Security Specialty, or Azure Network/Security certifications
Employment eligibility to work with American Express in the United States is required; visa sponsorship will not be pursued

Benefits

Comp & perks

Competitive base salaries
Bonus incentives
6% Company Match on retirement savings plan
Free financial coaching and financial well-being support
Comprehensive medical, dental, vision, life insurance, and disability benefits
Flexible working model with hybrid, onsite or virtual arrangements depending on role and business need
20+ weeks paid parental leave for all parents, regardless of gender, offered for pregnancy, adoption or surrogacy
Free access to global on-site wellness centers staffed with nurses and doctors (depending on location)
Free and confidential counseling support through our Healthy Minds program
Career development and training opportunities