Java / JavaScript / RESTful API / Cyber Security Engineer

Joining Amex Tech means discovering and shaping your contribution to something big. Here, you can work alongside talented tech teams and build a unique career with the Powerful Backing of American Express. With a range of opportunities to work with the latest technologies, and a commitment to back the broader engineering community through open source, our mission is to power your success. Because Amex Tech is powered by our technology, our culture, and our colleagues.

The Technology organization enables and accelerates the company’s growth strategies, delivering global capabilities and services in support of Amex’s customers and colleagues, while maintaining 24/7 servicing and availability to ensure an uninterrupted, high-quality customer experience. Technology provides the foundation for everything we do in the company while driving differentiation through building and leveraging innovative technology and data insights.

At American Express, our mission is to deliver the world’s best customer experience every day. At the heart of this mission is our Information Security organization, enabling exceptional experiences built on a foundation of trust, service, and security. We leverage advanced technologies and data-driven insights to stay ahead of an evolving threat landscape. We foster a culture of passion, curiosity, and courage-empowering you to innovate, grow, and help shape the future of a Fortune 100 company.

Trust. Service. Security.

Cybersecurity Engineer I develops, enhances, tests, and supports secure software solutions for the AuthBlue Single Sign-On (SSO) platform, which provides authentication and Identity & Access Management (IAM) capabilities for applications across the organization.

This role is primarily focused on software engineering within a cybersecurity environment, contributing to frontend and backend application components, APIs, integrations, and supporting services. With guidance from peers and leaders, the engineer delivers product features and technical enhancements, resolves software defects, applies secure development practices, and helps ensure the AuthBlue platform remains secure, reliable, scalable, and maintainable.

The role collaborates with engineers, cybersecurity teams, product partners, and business stakeholders to deliver solutions that support the organization's authentication, authorization, and identity security objectives.

• Develops, tests, maintains, and enhances frontend and backend components of the AuthBlue SSO platform, contributing to secure, reliable, and scalable authentication and identity services.
• Implements product features, technical enhancements, application integrations, and defect resolutions with guidance from more experienced engineers.
• Develops and maintains RESTful APIs, services, application integrations, and data access components supporting authentication, authorization, identity, and SSO capabilities.
• Writes readable, maintainable, secure, and well-tested code using established engineering standards, development patterns, and collaborative Git-based workflows.
• Participates throughout the software development lifecycle, including requirements refinement, technical design, development, code review, automated testing, deployment, troubleshooting, and production support.
• Applies secure software development practices, including authentication and authorization controls, input validation, error handling, protection of sensitive data, and remediation of application vulnerabilities.
• Troubleshoots and debugs issues across frontend and backend components, APIs, integrations, and supporting services to identify root causes and implement appropriate resolutions.
• Contributes to automated testing, CI/CD, monitoring, and software delivery practices that improve the quality, reliability, and operational health of the AuthBlue platform.
• Collaborates with engineers, cybersecurity teams, product partners, and other stakeholders to understand requirements, break work into implementation tasks, and deliver solutions aligned with business and security objectives.
• Creates and maintains technical documentation and participates in Agile team activities, code reviews, technical discussions, and continuous improvement of the AuthBlue platform.

• Bachelor's degree in computer science, Software Engineering, Information Systems, Cybersecurity, or a related technical discipline; or comparable education and professional experience.
• 2-4 years of software engineering experience, which may include internships, co-ops, or substantial project experience.
• Working knowledge of Java, with experience or familiarity with Spring Boot.
• Working knowledge of JavaScript/TypeScript, including experience with Node.js.
• Experience with Git and collaborative development workflows, including pull requests and code reviews.
• Understanding of RESTful APIs, HTTP, JSON, client/server architecture, and common application integration concepts.
• Experience working with relational (SQL) and NoSQL databases, including basic data modeling, querying, and application integration.
• Understanding of software engineering fundamentals, including object-oriented programming, data structures, error handling, asynchronous programming, and automated testing.
• Ability to troubleshoot and debug applications across frontend and backend components.
• Basic understanding of application security and IAM principles, including authentication, authorization, input validation, and secure handling of sensitive data.
• Familiarity with CI/CD concepts, automated testing, Agile development, and modern software delivery practices.
• Ability to write readable, maintainable, and well-tested code and effectively incorporate feedback from code reviews and more experienced engineers.
• Demonstrated ability to collaborate effectively, communicate clearly, solve problems, ask questions, and learn unfamiliar technologies and concepts.
• Ability to understand well-defined requirements and break them into implementation tasks with support from the team.

Additional Preferred Qualifications

• Experience with Identity & Access Management, authentication, authorization, or Single Sign-On (SSO) technologies and familiarity with standards such as SAML, OAuth 2.0, or OpenID Connect (OIDC).
• Experience with Vert.x, React, or similar application development frameworks.
• Exposure to cloud platforms, Docker/containers, Kubernetes, and application monitoring or observability tools.
• Experience applying secure coding practices or identifying and remediating application security vulnerabilities.

• Relevant certifications in software development, cloud technologies, application security, IAM, or cybersecurity are a plus but not required.

Employment eligibility to work with American Express in the United States is required as the company will not pursue visa sponsorship for these positions.