Senior Manager- Cyber Security Engineering (Architecture as Code creation and review for Data Security/ Encryption/ Secrets management/ Tokenization capabilities)

Joining Amex Tech means discovering and shaping your contribution to something big. Here, you can work alongside talented tech teams and build a unique career with the Powerful Backing of American Express. With a range of opportunities to work with the latest technologies, and a commitment to back the broader engineering community through open source, our mission is to power your success. Because Amex Tech is powered by our technology, our culture, and our colleagues.
The Technology organization enables and accelerates the company’s growth strategies, delivering global capabilities and services in support of Amex’s customers and colleagues, while maintaining 24/7 servicing and availability to ensure an uninterrupted, high-quality customer experience. Technology provides the foundation for everything we do in the company while driving differentiation through building and leveraging innovative technology and data insights.

At American Express, our mission is to deliver the world’s best customer experience every day. At the heart of this mission is our Information Security organization, enabling exceptional experiences built on a foundation of trust, service, and security. We leverage advanced technologies and data-driven insights to stay ahead of an evolving threat landscape. We foster a culture of passion, curiosity, and courage—empowering you to innovate, grow, and help shape the future of a Fortune 100 company.

Trust. Service. Security.

The Sr. Manager, Cybersecurity Engineering is a hands-on engineering role responsible for designing, building, and continuously evolving Security Architecture as Code for the Data Security organization. This role transforms enterprise security standards, encryption patterns, and control objectives into reusable engineering assets that enable development teams to build secure, compliant solutions by default.

Working at the intersection of software engineering, security architecture, AI, and developer enablement, this role develops reusable frameworks, bootstrap code, reference implementations, engineering libraries, and AI-assisted development assets that improve engineering quality, accelerate delivery, and increase consistency across multiple development teams.

As a key contributor to our transformation to a product-driven Data Security organization, this role partners closely with Product Owners, Technical Project Managers, Engineering Operations, and software engineering teams to ensure security standards are embedded directly into the software development lifecycle and become fundamental to everyday engineering practices.

• 5–7 years of experience in software engineering, cybersecurity engineering, platform engineering, or security engineering.
• Strong software development experience with modern programming languages and cloud-native application development.
• Experience implementing enterprise security capabilities such as encryption, key management, authentication, authorization, secrets management, tokenization, PKI, or related security technologies.
• Experience developing reusable software frameworks, libraries, APIs, SDKs, or engineering platforms.
• Experience performing technical code reviews and providing engineering guidance to development teams.
• Hands-on experience leveraging AI development tools such as GitHub Copilot, ChatGPT, Claude, or similar technologies to improve engineering productivity and software quality.
• Strong understanding of Agile software development, DevSecOps, CI/CD pipelines, and modern engineering practices.
• Excellent communication and collaboration skills with the ability to coach engineers and influence technical direction across multiple teams.

Preferred Qualifications

• Experience building internal developer platforms or engineering enablement capabilities.
• Experience developing reusable Architecture as Code, Infrastructure as Code, or Policy as Code solutions.
• Experience building security services or developer-facing security platforms.
• Familiarity with developer experience (DevEx) principles and engineering productivity metrics.
Experience working in large-scale enterprise software engineering organizations.

Success Measures

Success in this role will be measured by:

• Adoption of Security Architecture as Code assets across engineering teams.
• Increased developer productivity through reusable engineering frameworks and AI-assisted development.
• Improved consistency and quality of enterprise security control implementation.
• Reduction in engineering rework and implementation variability.
• Increased engineering velocity through reusable code, automation, and AI-enabled development practices.
• Positive developer feedback and adoption of reusable engineering assets.
Improved scalability of secure software delivery across the Data Security organization.

Employment eligibility to work with American Express in the United States is required as the company will not pursue visa sponsorship for these positions.