Senior Protegrity Platform Engineer

Amex GBT is a place where colleagues find inspiration in travel as a force for good and through their work can make an impact on our industry. Were here to help our colleagues achieve success and offer an inclusive and collaborative culture where your voice is valued.

We are seeking aProtegrityEngineer with strong (7 years)hands-on experience implementingdata protectionsolutions usingProtegrityfor tokenization and detokenization of sensitive data (PII/PCI). This role will focus on designing and integrating tokenization services into enterprise applications and data flows configuringProtegritycomponents and policies and ensuring secure compliant handling of protected data across systems

• Design and implementProtegrity-basedtokenization/detokenizationsolutions for protecting sensitive data (PII PCI PHI as applicable).
• IntegrateProtegritytokenization services with applications APIs microservices and batch processes across multiple environments (dev/test/prod).
• Configure and manageProtegritycomponents (policy/configuration token vaults as applicable key management integrations service endpoints).
• Define andmaintaintokenizationpolicies formats and rules aligned with business requirements and compliance standards.
• Work with security architecture and application teams to implementdata protection-by-design including least privilege and separation of duties.
• Support key management certificate management and secure secrets handling (KMS/HSM integrations where applicable).
• Perform troubleshooting for tokenization flows: authentication/authorization issues latency service connectivity configuration errors and data mapping issues.
• Implement monitoring and operational support forProtegrityservices including logs metrics alerting and runbooks.
• Ensure secure handling of de-tokenization access paths and enforce strong controls for who/what can de-tokenize and under which conditions.
• Support audits and compliance evidence collection (PCI DSS GDPR SOX internal security controls) including documentation and operational procedures.

What Were Looking For

• 7 years of strong hands-on experience withProtegrityimplementation fortokenization and detokenizationin enterprise environments.
• Solid understanding of data security principles: encryption vs tokenization data classification secure key management and access controls.
• 6 years of experience integrating tokenization into applications/services using APIs/SDKs and handling common data patterns (JSON payloads database fields files).
• Understandingauthentication and authorization patterns for sensitive services (mTLS OAuth2/OIDC/JWT concepts or enterprise IAM equivalents).
• 7 years of experience working with Linux/Unix environments scripting and operational troubleshooting.
• Ability to write andmaintaintechnical documentation runbooks and integration guides.
• Strong debugging and problem-solving skills especially in distributed systems and multi-environment deployments.

Preferred Qualifications

• Experience exposing/consuming tokenization services throughAPI Gatewayssuch asAWS API GatewayorApigee(routing security throttling logging).
• Experience with cloud services and security tooling (AWS IAM KMS Secrets Manager CloudWatch).
• Experience with CI/CD and automation (GitHub Actions/Jenkins) andIaC(Terraform/CloudFormation).
• Familiarity with compliance standards and audit practices (PCI DSS GDPR SOX) and producingevidence ofartifacts.
• Experience with microservices container platforms (Docker/Kubernetes) and service-to-service security.
• Knowledge of data masking privacy engineering and data governance processes.

Location

The #TeamGBT Experience

Work and life: Find your happy medium at Amex GBT.

• Flexible benefits are tailored to each country and start the day you do. These include health and welfare insurance plans retirement programs parental leave adoption assistance and wellbeing resources to support you and your immediate family.

• Travel perks: get a choice of deals each week from major travel providers on everything from flights to hotels to cruises and car rentals.

• Develop the skills you want when the time is right for you with access to over 20000 courses on our learning platform leadership courses and new job openings available to internal candidates first.

• We strive to champion Inclusion in every aspect of our business at Amex GBT. You can connect with colleagues through our global INclusion Groups centered around common identities or initiatives to discuss challenges obstacles achievements and drive company awareness and action.

• And much more!

All applicants will receive equal consideration for employment without regard to age sex gender (and characteristics related to sex and gender) pregnancy (and related medical conditions) race color citizenship religion disability or any other class or characteristic protected by law.

Click Here for Additional Disclosures in Accordance with the LA County Fair Chance Ordinance.

Furthermore we are committed to providing reasonable accommodation to qualified individuals with disabilities. Please let your recruiter know if you need an accommodation at any point during the hiring process. For details regarding how we protect your data please consult the Amex GBT Recruitment Privacy Statement.

What if I dont meet every requirement If youre passionate about our mission and believe youd be a phenomenal addition to our team dont worry about checking every box; please apply anyway. You may be exactly the person were looking for!