[Skip to main content](#main-content) [OpenNash Jobs](https://jobs.opennash.com/) [Hiring report](/reports/hiring/) · [All American Express jobs](https://jobs.opennash.com/companies/american-express/) · [Search jobs](/search/) American Express · Phoenix, AZ # Senior Software Engineer I Phoenix, AZ, United States Hybrid Senior individual contributor Software Engineering Listed on American Express’s official careers site. Posted October 8, 2026. Check that it is still open and apply there. [Apply on American Express’s careers site →](https://egug.fa.us2.oraclecloud.com/hcmUI/CandidateExperience/en/sites/CX_1/job/26013608) [OpenNash Jobs](https://jobs.opennash.com/) / [American Express](https://jobs.opennash.com/companies/american-express/) / Senior Software Engineer I ## Job description Infrastructure as Code Engineer – Multi-Cloud We are seeking an experienced Infrastructure as Code (IaC) Engineer to design, automate, and secure scalable infrastructure across GCP, AWS, and Azure. The role requires strong expertise in Terraform, cloud networking, network security, IAM, Kubernetes networking, and API gateways. The engineer will build reusable IaC modules and secure multi-cloud patterns, implement network and security controls, automate infrastructure through CI/CD and policy-as-code, and establish standardized self-service capabilities for engineering teams. The role will also support AI and agentic enablement, orchestrating secure connectivity, identity, API/tool access, and infrastructure patterns for deploying agentic workloads across multi-cloud environments. ## Responsibilities 7+ years of infrastructure engineering experience with strong expertise in Infrastructure as Code (IaC) using Terraform, OpenTofu, or similar frameworks. 7+ years of hands-on experience designing and automating infrastructure across Google Cloud Platform (GCP), AWS, and/or Azure, with an emphasis on reusable, standardized multi-cloud patterns. Strong knowledge of cloud networking, including VPC/VNet architecture, subnets, routing, DNS, NAT, load balancing, private connectivity, peering, transit architectures, VPN, and dedicated interconnects. Deep understanding of network security, including security groups, firewall policies/rules, network ACLs, micro-segmentation, ingress/egress controls, private endpoints, and Zero Trust principles. Proven experience implementing network segmentation and isolation patterns across applications, environments, business units, and cloud platforms. Strong experience with API gateways and API infrastructure, including secure ingress/egress, authentication and authorization, rate limiting, routing, policy enforcement, private APIs, and service-to-service connectivity. Experience designing secure connectivity for Kubernetes and containerized workloads, including GKE/EKS/AKS networking, network policies, service ingress/egress, and workload isolation. Strong understanding of IAM, secrets management, encryption, certificates/PKI, and cloud security architecture, with the ability to integrate these controls into IaC modules and deployment pipelines. Proven experience building enterprise-grade reusable Terraform modules, policy-driven infrastructure patterns, CI/CD integrations, automated testing, and infrastructure governance. Experience designing and operating large-scale, highly available, resilient multi-cloud infrastructure using standardized automation and security controls. Strong understanding of distributed systems, microservices, service-to-service communication, and modern application connectivity patterns. Experience enabling AI/agentic workloads in multi-cloud environments, including secure agent-to-API/tool connectivity, identity and authorization, controlled network access, API gateway integration, secrets handling, and infrastructure automation for agentic platforms. ## Qualifications Experience developing multi-cloud network and security architectures spanning GCP, AWS, Azure, on-premises, and SaaS environments. Experience building IaC platform capabilities such as reusable modules, golden patterns, self-service infrastructure, policy-as-code, automated compliance, and developer enablement. Experience with network security platforms and cloud-native controls, such as Cloud NGFW/firewalls, AWS Network Firewall, Azure Firewall, WAF, IDS/IPS, secure web gateways, and service mesh technologies. Experience with API management platforms such as Apigee, AWS API Gateway, Azure API Management, Kong, or equivalent technologies. Knowledge of Zero Trust, least privilege, defense-in-depth, micro-segmentation, and secure-by-default infrastructure design. Experience with policy-as-code and security automation using technologies such as OPA, Sentinel, organization policies, IAM policies, and automated IaC security scanning. Experience with FinOps and cloud cost optimization, particularly network, data-transfer, NAT, load-balancing, API, and multi-cloud connectivity costs. Experience enabling agentic AI platforms and AI infrastructure, including secure access to enterprise APIs, MCP/tool integrations, agent identity, guardrails, observability, and controlled cross-cloud connectivity. Experience establishing IaC standards and governance for AI/agentic infrastructure, enabling engineering teams to provision secure networking, APIs, compute, identity, and security controls through reusable modules. Relevant certifications such as HashiCorp Terraform Associate, GCP Professional Cloud Network Engineer/Cloud Architect/Cloud Security Engineer, AWS Advanced Networking or Security Specialty, or Azure Network/Security certifications. Employment eligibility to work with American Express in the United States is required as the company will not pursue visa sponsorship for these positions. ## At a glance - Posted by the employer: Oct 8, 2026 - First seen by OpenNash: Oct 11, 2026 - Last checked: Oct 18, 2026 - Listed for: 10 days - Location: Phoenix, AZ, United States - Work arrangement: Hybrid[Apply on American Express’s careers site →](https://egug.fa.us2.oraclecloud.com/hcmUI/CandidateExperience/en/sites/CX_1/job/26013608) ## More jobs at American Express ### [Campus Graduate Masters Full-Time Engineer - 2027 Software Engineer II, Enterprise Technology Services- Phoenix, AZ](https://jobs.opennash.com/companies/american-express/jobs/d0901fc9f9b1b14d1b79/) Phoenix, AZ, United States ### [Campus Graduate Masters Summer Internship Program - 2027 Software Engineer, Enterprise Technology Services- Phoenix, AZ](https://jobs.opennash.com/companies/american-express/jobs/ff56573fd08d66807ffb/) Phoenix, AZ, United States ### [Campus Undergraduate Full-Time Engineer - 2027 Software Engineer I, Enterprise Technology Services- Phoenix, AZ](https://jobs.opennash.com/companies/american-express/jobs/7b9c7d7cf629b44ca945/) Phoenix, AZ, United States ### [Software Engineer II](https://jobs.opennash.com/companies/american-express/jobs/27a21b987bbe57488151/) Phoenix, AZ, United States ### [Software Engineer-Python/ GO/ Java/ JavaScript (Cyber Security)](https://jobs.opennash.com/companies/american-express/jobs/abe93fac22fd42a85ded/) Phoenix, AZ, United States ## Similar jobs at other companies ### [Software Engineer/Sr. Software Engineer](https://jobs.opennash.com/companies/microsoft/jobs/194f63de625f0dce008e/) Microsoft · United States, Washington, Redmond ### [Senior Software Engineer/Software Engineer II](https://jobs.opennash.com/companies/microsoft/jobs/533e77af5ee9c7fa5145/) Microsoft · United States, Washington, Redmond ### [Software and Data Engineer - Software Engineer III- Agentic Pricing](https://jobs.opennash.com/companies/jpmorganchase/jobs/1adbc421af4b64b8e0c5/) JPMorganChase · Jersey City, NJ, United States ### [Software Developer/Software Engineer in Test](https://jobs.opennash.com/companies/general-dynamics/jobs/229bce1af89aceaed99c/) General Dynamics · Falls Church, VA, US ### [Software Engineer II – Embedded Software](https://jobs.opennash.com/companies/bae-systems/jobs/9325424177b18e460029/) BAE Systems · Merrimack, New Hampshire, United States OpenNash lists jobs from employers’ own careers sites and does not handle applications. Dates come from the employer where stated; “first seen” and “last checked” are our own observations. OpenNash Jobs · Official listings with dates and links to the employer. [Weekly hiring report](/reports/hiring/) · [Methodology](/methodology/)