We are seeking an experienced Infrastructure as Code (IaC) Engineer to design, automate, and secure scalable infrastructure across GCP, AWS, and Azure. The role requires strong expertise in Terraform, cloud networking, network security, IAM, Kubernetes networking, and API gateways.
The engineer will build reusable IaC modules and secure multi-cloud patterns, implement network and security controls, automate infrastructure through CI/CD and policy-as-code, and establish standardized self-service capabilities for engineering teams. The role will also support AI and agentic enablement, orchestrating secure connectivity, identity, API/tool access, and infrastructure patterns for deploying agentic workloads across multi-cloud environments.
Responsibilities- 7+ years of infrastructure engineering experience with strong expertise in Infrastructure as Code (IaC) using Terraform, OpenTofu, or similar frameworks.
- 7+ years of hands-on experience designing and automating infrastructure across Google Cloud Platform (GCP), AWS, and/or Azure, with an emphasis on reusable, standardized multi-cloud patterns.
- Strong knowledge of cloud networking, including VPC/VNet architecture, subnets, routing, DNS, NAT, load balancing, private connectivity, peering, transit architectures, VPN, and dedicated interconnects.
- Deep understanding of network security, including security groups, firewall policies/rules, network ACLs, micro-segmentation, ingress/egress controls, private endpoints, and Zero Trust principles.
- Proven experience implementing network segmentation and isolation patterns across applications, environments, business units, and cloud platforms.
- Strong experience with API gateways and API infrastructure, including secure ingress/egress, authentication and authorization, rate limiting, routing, policy enforcement, private APIs, and service-to-service connectivity.
- Experience designing secure connectivity for Kubernetes and containerized workloads, including GKE/EKS/AKS networking, network policies, service ingress/egress, and workload isolation.
- Strong understanding of IAM, secrets management, encryption, certificates/PKI, and cloud security architecture, with the ability to integrate these controls into IaC modules and deployment pipelines.
- Proven experience building enterprise-grade reusable Terraform modules, policy-driven infrastructure patterns, CI/CD integrations, automated testing, and infrastructure governance.
- Experience designing and operating large-scale, highly available, resilient multi-cloud infrastructure using standardized automation and security controls.
- Strong understanding of distributed systems, microservices, service-to-service communication, and modern application connectivity patterns.
- Experience enabling AI/agentic workloads in multi-cloud environments, including secure agent-to-API/tool connectivity, identity and authorization, controlled network access, API gateway integration, secrets handling, and infrastructure automation for agentic platforms.
- Experience developing multi-cloud network and security architectures spanning GCP, AWS, Azure, on-premises, and SaaS environments.
- Experience building IaC platform capabilities such as reusable modules, golden patterns, self-service infrastructure, policy-as-code, automated compliance, and developer enablement.
- Experience with network security platforms and cloud-native controls, such as Cloud NGFW/firewalls, AWS Network Firewall, Azure Firewall, WAF, IDS/IPS, secure web gateways, and service mesh technologies.
- Experience with API management platforms such as Apigee, AWS API Gateway, Azure API Management, Kong, or equivalent technologies.
- Knowledge of Zero Trust, least privilege, defense-in-depth, micro-segmentation, and secure-by-default infrastructure design.
- Experience with policy-as-code and security automation using technologies such as OPA, Sentinel, organization policies, IAM policies, and automated IaC security scanning.
- Experience with FinOps and cloud cost optimization, particularly network, data-transfer, NAT, load-balancing, API, and multi-cloud connectivity costs.
- Experience enabling agentic AI platforms and AI infrastructure, including secure access to enterprise APIs, MCP/tool integrations, agent identity, guardrails, observability, and controlled cross-cloud connectivity.
- Experience establishing IaC standards and governance for AI/agentic infrastructure, enabling engineering teams to provision secure networking, APIs, compute, identity, and security controls through reusable modules.
- Relevant certifications such as HashiCorp Terraform Associate, GCP Professional Cloud Network Engineer/Cloud Architect/Cloud Security Engineer, AWS Advanced Networking or Security Specialty, or Azure Network/Security certifications.
Employment eligibility to work with American Express in the United States is required as the company will not pursue visa sponsorship for these positions.
About UsAt American Express, our culture is built on a 175-year history of innovation, shared values and Leadership Behaviors, and an unwavering commitment to back our customers, communities, and colleagues. From delivering differentiated products to providing world-class customer service, we operate with a strong risk mindset, ensuring we continue to uphold our brand promise of trust, security, and service.
As part of Team Amex, you’ll experience our powerful backing with comprehensive support for your holistic well-being and many opportunities to learn new skills, develop as a leader, and grow your career. Here, your voice and ideas matter, your work makes an impact, and together, you will help us define the future of American Express.
About the TeamWe back you with benefits that support your holistic well-being so you can be and deliver your best. This means caring for you and your loved ones' physical, financial, and mental health, as well as providing the flexibility you need to thrive personally and professionally:
- Competitive base salaries
- Bonus incentives
- 6% Company Match on retirement savings plan
- Free financial coaching and financial well-being support
- Comprehensive medical, dental, vision, life insurance, and disability benefits
- Flexible working model with hybrid, onsite or virtual arrangements depending on role and business need
- 20+ weeks paid parental leave for all parents, regardless of gender, offered for pregnancy, adoption or surrogacy
- Free access to global on-site wellness centers staffed with nurses and doctors (depending on location)
- Free and confidential counseling support through our Healthy Minds program
- Career development and training opportunities
For a full list of Team Amex benefits, visit our Colleague Benefits Site.
Skills Required
- 7+ years of infrastructure engineering experience
- 7+ years designing and automating infrastructure across GCP, AWS, and/or Azure
- Strong Infrastructure as Code experience using Terraform, OpenTofu, or similar frameworks
- Strong cloud networking expertise, including VPC/VNet architecture, routing, DNS, NAT, load balancing, private connectivity, peering, VPN, and dedicated interconnects
- Deep knowledge of network security, segmentation, isolation, Zero Trust, and ingress/egress controls
- Experience with API gateways and API infrastructure
- Experience securing Kubernetes and containerized workload connectivity, including GKE, EKS, or AKS networking
- Strong understanding of IAM, secrets management, encryption, certificates/PKI, and cloud security architecture
- Experience building reusable Terraform modules, policy-driven infrastructure, CI/CD integrations, automated testing, and infrastructure governance
- Experience designing and operating large-scale, highly available, resilient multi-cloud infrastructure
- Understanding of distributed systems, microservices, service-to-service communication, and application connectivity patterns
- Experience enabling AI or agentic workloads, including secure agent-to-API/tool connectivity, identity, authorization, secrets, and infrastructure automation
- Experience with multi-cloud network and security architectures spanning cloud, on-premises, and SaaS environments
- Experience developing IaC platform capabilities, golden patterns, self-service infrastructure, policy-as-code, automated compliance, and developer enablement
- Experience with cloud-native network security platforms, firewalls, WAF, IDS/IPS, secure web gateways, or service mesh technologies
- Experience with API management platforms such as Apigee, AWS API Gateway, Azure API Management, or Kong
- Experience with OPA, Sentinel, organization policies, IAM policies, or automated IaC security scanning
- Experience with FinOps and cloud cost optimization
- Experience enabling agentic AI platforms, MCP/tool integrations, guardrails, observability, and controlled cross-cloud connectivity
- Relevant cloud, networking, security, or Terraform certifications
- Employment eligibility to work in the United States without visa sponsorship
American Express Compensation & Benefits Highlights
The following summarizes recurring compensation and benefits themes identified from responses generated by popular LLMs to common candidate questions about American Express and has not been reviewed or approved by American Express.
-
Fair & Transparent Compensation — Pay is considered generally solid for many, with frequent mentions of good compensation alongside strong benefits. Overall sentiment points to many employees feeling adequately paid even if it is not viewed as top-of-market.
American Express Insights
What We Do
At American Express, we know that with the right backing, people and businesses have the power to progress in incredible ways. Whether we’re supporting our customers’ financial confidence to move ahead, taking commerce to new heights, or encouraging people to explore the world, our colleagues are constantly striving to uphold our powerful backing promise to our customers and each other every day. These beliefs have been our North Star for 170 years as our business transformed – from helping evacuate travelers during World Wars, to ensuring the safety of our customers’ funds during the Great Depression in the U.S., to creating the Shop Small® movement to help small businesses recover from the Financial Crisis, to providing aid to communities impacted by many natural disasters and so much more. For generations, the key to our success has been the determination and resilience of our American Express colleagues. Now, as a globally integrated payments company, we work together to provide customers with access to products, insights and world-class experiences that enrich lives and build business success. Join us and let’s lead the way together.
