Senior Infrastructure Engineer I

American Express; Phoenix (AZ); On-site; USD 130,000 - 170,000; Full time

Job summary

American Express is seeking a Senior Infrastructure Engineer to design, deploy, and maintain scalable, secure enterprise infrastructure. You will manage Kubernetes environments, container platforms, and CI/CD workflows across Linux/Unix stacks, with strong emphasis on observability, automation, and incident response.

The role requires deep experience with cloud-native tooling (Kubernetes/OpenShift), Istio, Vault, and GPU-enabled deployments, plus leadership in change control and production

Qualifications

• 15+ years of IT experience across installation, configuration, administration, design, development, deployment, testing, and production support throughout the SDLC.
• Experience supporting business application systems in finance and health care environments.
• Deep knowledge of high-availability infrastructure, enterprise operations, release management, incident management, performance optimization, and production support.

Responsibilities

• Build, administer, upgrade, scale, and troubleshoot bare-metal Kubernetes environments using Kubespray and Kubeadm, including highly available control planes, resource limits, persistent storage, secrets, YAML automation, kubectl scripting, and Horizontal Pod Autoscaling.
• Engineer containerized and microservices platforms with Kubernetes, Docker, Containerd, OpenShift, Rancher, Helm, and reusable Helm charts.
• Use Istio for observability, security, traffic management, routing, load balancing, fault tolerance, resilience, and context-based ingress routing.
• Operate GitLab, configure ADS authentication, maintain security and patching, automate upgrades, enable runners, and deliver CI/CD pipelines with Jenkins and Quay.
• Administer Linux, Unix, and RHEL systems through builds, upgrades, patching, migrations, scripting, troubleshooting, and root-cause analysis.
• Deploy and operate HashiCorp Vault HA on Kubernetes with Vault Agent Injector, Kubernetes secrets, and Raft storage.
• Create end-to-end visibility with Elasticsearch, Fluentd, Metricbeat, Filebeat, Kibana, Prometheus, Grafana, APM agents, and Weave Scope.
• Design and deploy a standalone NGINX reverse proxy to distribute AI/LLM inference traffic across GPU-enabled worker nodes.
• Deploy and Monitor NVIDIA A10 GPU environments with Prometheus, Grafana, Node Exporter, and DCGM Exporter.
• Install, upgrade, configure, and support MapR, Hadoop, IBM DataStage, and Infosphere Information Server platforms.
• Lead change, release, incident response, production support, RCA, documentation, and knowledge transfer.

Skills

Kubernetes

OpenShift

Docker

CI/CD

GitLab

Jenkins

Helm

Istio

Prometheus

Grafana

Linux/Unix

Security

Education

Master's degree in Computer Science

Tools

Kubespray

Kubeadm

Quay

Jenkins

GitLab Runner

Prometheus

Grafana

Job description

Job Description

Joining Amex Tech means discovering and shaping your contribution to something big. Here, you can work alongside talented tech teams and build a unique career with the Powerful Backing of American Express. With a range of opportunities to work with the latest technologies, and a commitment to back the broader engineering community through open source, our mission is to power your success. Because Amex Tech is powered by our technology, our culture, and our colleagues.

Job Description

Joining Amex Tech means discovering and shaping your contribution to something big. Here, you can work alongside talented tech teams and build a unique career with the Powerful Backing of American Express. With a range of opportunities to work with the latest technologies, and a commitment to back the broader engineering community through open source, our mission is to power your success. Because Amex Tech is powered by our technology, our culture, and our colleagues.
Senior Infrastructure Engineer, building resilient platforms. Modernize enterprise infrastructure. Enable AI at scale.

Responsibilities

• Build, administer, upgrade, scale, and troubleshoot bare-metal Kubernetes environments using Kubespray and Kubeadm, including highly available control planes, resource limits, persistent storage, secrets, YAML automation, kubectl scripting, and Horizontal Pod Autoscaling.
• Engineer containerized and microservices platforms with Kubernetes, Docker, Containerd, OpenShift, Rancher, Helm, and reusable Helm charts.
• Use Istio for observability, security, traffic management, routing, load balancing, fault tolerance, resilience, and context-based ingress routing.
• Operate GitLab, configure ADS authentication, maintain security and patching, automate upgrades, enable runners, and deliver CI/CD pipelines with Jenkins and Quay.
• Administer Linux, Unix, and RHEL systems through builds, upgrades, patching, migrations, scripting, troubleshooting, and root-cause analysis.
• Deploy and operate HashiCorp Vault HA on Kubernetes with Vault Agent Injector, Kubernetes secrets, and Raft storage.
• Create end-to-end visibility with Elasticsearch, Fluentd, Metricbeat, Filebeat, Kibana, Prometheus, Grafana, APM agents, and Weave Scope.
• Design and deploy a standalone NGINX reverse proxy to distribute AI/LLM inference traffic across GPU-enabled worker nodes.
• Deploy and Monitor NVIDIA A10 GPU environments with Prometheus, Grafana, Node Exporter, and DCGM Exporter.
• Install, upgrade, configure, and support MapR, Hadoop, IBM DataStage, and Infosphere Information Server platforms.
• Lead change, release, incident response, production support, RCA, documentation, and knowledge transfer.

Qualifications

• 15+ years of IT experience across installation, configuration, administration, design, development, deployment, testing, and production support throughout the SDLC.
• Experience supporting business application systems in finance and health care environments.
• Deep knowledge of high-availability infrastructure, enterprise operations, release management, incident management, performance optimization, and production support.
• Platforms: Google Cloud, Amazon Web (or other variant of public cloud) Unix, Linux, RHEL, Windows NT/XP/2000/2003 Server, VMware ESX, vSphere, UCS, and HPE infrastructure.
• Cloud-native platforms: Kubernetes, OpenShift, Rancher, Docker, Containerd, Kubespray, Kubeadm, Helm, Istio, and NGINX.
• CI/CD and registries: GitLab, GitLab Runner, Jenkins, and Quay.
• Observability: Grafana, Kibana, Prometheus, Elasticsearch, Fluentd, Metricbeat, Filebeat, APM Server and agents, Weave Scope, Node Exporter, and DCGM Exporter.
• Security and secrets: HashiCorp Vault, Vault Agent Injector, Raft storage, LDAP, Active Directory/ADS, Kubernetes secrets, and ACEs.
• ETL and data integration: IBM DataStage 8.x/7.5x2/7.x/6.x EE and SE, MetaStage, Parallel Extender, Infosphere Information Server 8.0/8.1.1, Information Analyzer/ProfileStage, and QualityStage.
• Databases: DB2 9.x/7.x, SQL Server 2005/2000, Netezza, and MySQL.
• Big data: MapR 4.x/5.x/6.x, HDFS, MapReduce, YARN, Oozie, Pig, Hive, HBase, Hue, Sqoop, and DistCp.
• Automation and scheduling: Shell scripting, kubectl, Kubernetes YAML, Control-M, Autosys, and Crontab.
• Operations tools: StackIQ, Satellite Server, UCS Intersight, Citrix, PuTTY, Cygwin X, ServiceNow, IBM Infoman, IBM Infoweb, and IBM ESR.
• HPE Data Fabric administration.
• Master's degree in Computer Science or similar field.

Employment eligibility to work with American Express in the United States is required as the company will not pursue visa sponsorship for these positions.