Senior Java/ AI Engineer- Cybersecurity Engineer

The ideal candidate will combine deep software engineering expertise with hands-on experience in PKI, cryptography, encryption, tokenization, digital certificates, secrets and key management, APIs, and cloud-native technologies .

A key focus of this role will be leveraging Generative AI and AI-based automation across engineering and operational workflows to improve developer productivity, automate vulnerability remediation, proactively identify and remediate issues, reduce manual intervention, and advance our journey toward incident-free operations .

• Bachelor’s degree in Computer Science, Computer Engineering, Software Engineering, or equivalent practical experience.
• 7+ years of professional software development experience.
• 2+ years of experience leading software developers, including technical mentoring and design guidance.
• 5+ years of experience within Financial Services or another highly regulated industry.
• 5+ years of experience developing APIs, microservices, or backend applications using Java, Python, Go, JavaScript/TypeScript, or similar languages.
• 5+ years of experience developing or consuming REST and/or SOAP services.
• 2+ years of hands-on experience with GCP, AWS, Azure, or private/hybrid cloud platforms.
• 2+ years of experience with Kubernetes, Docker/containerization, service mesh, or related cloud-native technologies.
• 2+ years of experience developing solutions involving PKI, symmetric/asymmetric cryptography, encryption, tokenization, digital certificates, or cryptographic key management .
• 2+ years of experience developing or integrating services using HashiCorp Vault, KMS, HSM, or comparable secrets/key management technologies .
• Hands-on experience integrating LLMs or Generative AI into applications, software engineering workflows, or operational automation.
• Hands-on experience with AI agents, Retrieval-Augmented Generation (RAG), LLM APIs, prompt engineering, agentic workflows, or similar Generative AI application patterns .
• Experience applying AI to engineering and operational use cases such as incident detection, root-cause analysis, vulnerability remediation, observability, automated remediation, or recovery ., * Deep understanding of PKI architecture, certificate lifecycle management, cryptographic key lifecycle management, TLS/mTLS, encryption, digital signatures, and secure communication protocols .
• Experience designing highly available enterprise PKI or cryptographic services.
• Experience integrating applications with HSMs, enterprise PKI, HashiCorp Vault, cloud KMS, and certificate management platforms .
• Strong understanding of API security, OAuth/OIDC, authentication, and authorization.
• Experience with DevSecOps, CI/CD, automated security testing, observability, and infrastructure automation. Understanding of security, privacy, access control, and responsible AI considerations for enterprise AI solutions. *

Joining Amex Tech means discovering and shaping your contribution to something big. Here, you can work alongside talented tech teams and build a unique career with the Powerful Backing of American Express. With a range of opportunities to work with the latest technologies, and a commitment to back the broader engineering community through open source, our mission is to power your success. Because Amex Tech is powered by our technology, our culture, and our colleagues. The Technology organization enables and accelerates the company’s growth strategies, delivering global capabilities and services in support of Amex’s customers and colleagues, while maintaining 24/7 servicing and availability to ensure an uninterrupted, high-quality customer experience. Technology provides the foundation for everything we do in the company while driving differentiation through building and leveraging innovative technology and data insights.

At American Express, our mission is to deliver the world’s best customer experience every day. At the heart of this mission is our Information Security organization, enabling exceptional experiences built on a foundation of trust, service, and security. We leverage advanced technologies and data-driven insights to stay ahead of an evolving threat landscape. We foster a culture of passion, curiosity, and courage-empowering you to innovate, grow, and help shape the future of a Fortune 100 company.

Trust. Service. Security.

The Data Security team is responsible for safeguarding the organization’s most critical asset-its data-by ensuring confidentiality, integrity, and availability across all platforms and environments. Working at the intersection of cybersecurity, data governance, and privacy, the Data Security team focuses on capabilities such as data classification, encryption, secure data access, and monitoring. The team partners closely with engineering, risk, and business units to embed security controls throughout the data lifecycle-from creation and storage to sharing and archival.