Senior Cybersecurity Architect (AWS/GCP)

At American Express, our culture is built on a 175-year history of innovation, shared values and Leadership Behaviors, and an unwavering commitment to back our customers, communities, and colleagues. As part of Team Amex, you'll experience this powerful backing with comprehensive support for your holistic well-being and many opportunities to learn new skills, develop as a leader, and grow your career.

Here, your voice and ideas matter, your work makes an impact, and together, you will help us define the future of American Express.

This position will be part of a Network Security Engineering and Architecture team, supporting Business and Technology Cloud initiatives. The Sr. Cybersecurity Architect is responsible for the technical design and deployment of a diverse set of cloud and on-prem technologies.

This individual will be required to operate and lead efficiently within a highly skilled and agile engineering team. Candidates that are highly motivated, skilled, can learn quickly with minimal oversight, and constantly challenge themselves will greatly benefit on our team. Sr. Cybersecurity Architect’s will be expected to lead reviewing existing tools, applications and processes to help strengthen and optimize current capabilities, as well as identify any gaps or technical solutions to further enhance the team's effectiveness. Candidates will publish and contribute to architectural designs. Additionally, the successful candidate will support leadership, business and technology teams with technical recommendations, documentation and reporting. Extensive knowledge of various Policy Enforcement Points, LAN/WAN, TCP/IP, DNS and troubleshooting techniques is required. Understanding and hands on experience of Cloud principles and technologies including, but not limited to: AWS, GCP, Azure, Kubernetes (OCP, EKS, GKE, etc.), SaaS integrations (Databricks, Datadog, etc.).

Required Qualifications

• Experience (+5 years) knowledge and understanding of Network and Network Security fundamentals.
• Experience (+5 years) knowledge and understanding of public Cloud Service Provider (AWS, GCP, Azure) core services.
• A strong understanding of cloud computing technologies, including Infrastructure as a Service (IaaS), Platform as a Service (PaaS), and Software as a Service (SaaS).
• Provide reliable, predictable deployment and maintenance of distributed systems adhering to security standard methodologies.
• Responsible for the stability and performance of critical business services.
• Participating in Agile Sprints and associated ceremonies.

Desired Skills

• AWS, GCP, and Azure foundational services
• Experience across multiple Policy Enforcement Point technologies, such as: Palo Alto Network, AWS SG’s, GCP Firewalls and NGFWs, Azure NSG’s, VPC Endpoint Policies, Kubernetes networkPolicies, Istio serviceEntries, etc.
• Infrastructure as Code experience, including Terraform proficiency.
• Version Control experience with Github, including CI/CD integration with Github Actions and Workflows
• Experience publishing and contributing to architecture documentation.
• An understanding of Risk based decision making while simultaneously enabling business requirements.

Salary Range: $120,000.00 to $210,000.00 annually + bonus + benefits

The above represents the expected salary range for this job re