> Markdown version of [/jobs/ext/2960503-senior-software-engineer-i](https://www.wearedevelopers.com/jobs/ext/2960503-senior-software-engineer-i). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Senior Software Engineer I - **Company:** American Express Company - **Location:** Palo Alto, CA, United States - **Experience:** Expert - **Salary:** $123,000.0 - $215,250.0 - **Contract:** Permanent contract - **Skills:** Access Network, Application Programming Interfaces (APIs), Artificial Intelligence, Amazon Web Services, User Authentication, Automation of Tests, Microsoft Azure, Software as a Service, Cloud Computing, Cloud Computing Security, Cloud Engineering, Computer Networks, Continuous Integration, Network Address Translation, Distributed Systems, Domain Name System (DNS), Identity and Access Management, Intrusion Detection Systems, Subnetting, Virtual Private Networks (VPN), Key Management, Network Security, Routing, Network Segmentation, Peering, Public Key Infrastructure, Role-Based Access Control, Zero Trust Network Access, Web Application Security, Systems Integration, AI Infrastructure, Policy as Code, Cloud-native Network Functions (CNF), Google Cloud, Load Balancing, Istio, Delivery Pipeline, Multi-Cloud, Apigee, Firewalls (Computer Science), Amazon Virtual Private Cloud (VPC), Rate Limiting, Containerization, Kubernetes, Infrastructure Automation Frameworks, Hashicorp, Virtual Agents, Cloud Optimization, Api Gateway, Firewall Services Module, Terraform, Api Management, Security Orchestration, Automation & Response, Microservices - **Published:** September 17, 2026 - **Apply:** https://dejobs.org/x/x/068554AFD9DB442C948574A5ACA80CBA/job/ ## About the Role * 7+ years of infrastructure engineering experience with strong expertise in Infrastructure as Code (IaC) using Terraform, OpenTofu, or similar frameworks. * 7+ years of hands-on experience designing and automating infrastructure across Google Cloud Platform (GCP), AWS, and/or Azure , with an emphasis on reusable, standardized multi-cloud patterns. * Strong knowledge of cloud networking , including VPC/VNet architecture, subnets, routing, DNS, NAT, load balancing, private connectivity, peering, transit architectures, VPN, and dedicated interconnects. * Deep understanding of network security , including security groups, firewall policies/rules, network ACLs, micro-segmentation, ingress/egress controls, private endpoints, and Zero Trust principles. * Proven experience implementing network segmentation and isolation patterns across applications, environments, business units, and cloud platforms. * Strong experience with API gateways and API infrastructure , including secure ingress/egress, authentication and authorization, rate limiting, routing, policy enforcement, private APIs, and service-to-service connectivity. * Experience designing secure connectivity for Kubernetes and containerized workloads , including GKE/EKS/AKS networking, network policies, service ingress/egress, and workload isolation. * Strong understanding of IAM, secrets management, encryption, certificates/PKI, and cloud security architecture , with the ability to integrate these controls into IaC modules and deployment pipelines. * Proven experience building enterprise-grade reusable Terraform modules , policy-driven infrastructure patterns, CI/CD integrations, automated testing, and infrastructure governance. * Experience designing and operating large-scale, highly available, resilient multi-cloud infrastructure using standardized automation and security controls. * Strong understanding of distributed systems, microservices, service-to-service communication, and modern application connectivity patterns . * Experience enabling AI/agentic workloads in multi-cloud environments , including secure agent-to-API/tool connectivity, identity and authorization, controlled network access, API gateway integration, secrets handling, and infrastructure automation for agentic platforms., * Experience developing multi-cloud network and security architectures spanning GCP, AWS, Azure, on-premises, and SaaS environments. * Experience building IaC platform capabilities such as reusable modules, golden patterns, self-service infrastructure, policy-as-code, automated compliance, and developer enablement. * Experience with network security platforms and cloud-native controls , such as Cloud NGFW/firewalls, AWS Network Firewall, Azure Firewall, WAF, IDS/IPS, secure web gateways, and service mesh technologies. * Experience with API management platforms such as Apigee, AWS API Gateway, Azure API Management, Kong, or equivalent technologies. * Knowledge of Zero Trust, least privilege, defense-in-depth, micro-segmentation, and secure-by-default infrastructure design . * Experience with policy-as-code and security automation using technologies such as OPA, Sentinel, organization policies, IAM policies, and automated IaC security scanning. * Experience with FinOps and cloud cost optimization , particularly network, data-transfer, NAT, load-balancing, API, and multi-cloud connectivity costs. * Experience enabling agentic AI platforms and AI infrastructure , including secure access to enterprise APIs, MCP/tool integrations, agent identity, guardrails, observability, and controlled cross-cloud connectivity. * Experience establishing IaC standards and governance for AI/agentic infrastructure , enabling engineering teams to provision secure networking, APIs, compute, identity, and security controls through reusable modules. * Relevant certifications such as HashiCorp Terraform Associate, GCP Professional Cloud Network Engineer/Cloud Architect/Cloud Security Engineer, AWS Advanced Networking or Security Specialty, or Azure Network/Security certifications . Employment eligibility to work with American Express in the United States is required as the company will not pursue visa sponsorship for these positions. ## Related Videos - [Shipping Faster with Less: Render on Cloud Hosting, AI Workloads, and the Future of DevOps](https://www.wearedevelopers.com/videos/1894-shipping-faster-with-less-render-on-cloud-hosting-ai-workloads-and-the-future-of-devops) - [Rate-limiting using eBPF and Istio: How to protect your SaaS customers from themselves](https://www.wearedevelopers.com/videos/100220-rate-limiting-using-ebpf-and-istio-how-to-protect-your-saas-customers-from-themselves) - [Creating a routing app with Google Maps API from scratch](https://www.wearedevelopers.com/videos/831-creating-a-routing-app-with-google-maps-api-from-scratch) - [Inside Bitpanda's Tech Stack: Scaling a European Fintech Leader - Markus Dorner](https://www.wearedevelopers.com/videos/1979-inside-bitpanda-s-tech-stack-scaling-a-european-fintech-leader-markus-dorner) - [Get started with securing your cloud-native Java microservices applications](https://www.wearedevelopers.com/videos/123-get-started-with-securing-your-cloud-native-java-microservices-applications) - [A Technical Introduction to Bitcoin's 2nd Layer- The Lightning Network](https://www.wearedevelopers.com/videos/15-a-technical-introduction-to-bitcoin-s-2nd-layer-the-lightning-network) ## Related Articles - [Highest Paying Tech Companies for Developers](https://www.wearedevelopers.com/magazine/220-highest-paying-tech-companies-for-developers) - [Best US AI Conferences for CTOs in 2026: Build vs. Buy, Vendor Evaluation, and Peer Intelligence](https://www.wearedevelopers.com/magazine/736-best-us-ai-conferences-for-ctos-in-2026-build-vs-buy-vendor-evaluation-and-peer-intelligence) - [Got AI ideas but no money? Here are 10 free ways to level up your AI skills with Google Cloud](https://www.wearedevelopers.com/magazine/600-got-ai-ideas-but-no-money-here-are-10-free-ways-to-level-up-your-ai-skills-with-google-cloud) - [Top-Paying Tech Jobs (with Salaries)](https://www.wearedevelopers.com/magazine/372-top-paying-tech-jobs-with-salaries) - [Is Software Engineering Over-Saturated?](https://www.wearedevelopers.com/magazine/418-is-software-engineering-over-saturated) - [How to Become an AI Engineer](https://www.wearedevelopers.com/magazine/331-how-to-become-an-ai-engineer)