Director - Infra Engineering - Platform Security and Lifecycle Management

American Express Enterprise Cloud team is looking for innovators to help us build world-class applications, Cloud platforms and infrastructure supported by integrated CICD, Observability and security capabilities. The **Director Infrastructure Engineering – Platform Security and Lifecycle Management** is responsible for leading the strategy, governance, and execution of Platform as a Service and Middleware services lifecycle management across Private Cloud environments. This role leverages Gen AI/Agentic AI to drive fully automated platform upgrades, security posture management, capacity management, and operational resilience to ensure a secure, scalable, highly available, and compliant Private Cloud platform supporting mission-critical business applications. The Director partners closely with Platform Engineering, Information Security, Architecture, Infrastructure, SRE, DevOps, and Application Development teams to drive platform modernization, automate operations, reduce technology risk, and enable cloud-native adoption at scale. ### Responsibilities **Private Cloud Platform Upgrade Strategy & Modernization** - Define and execute the enterprise strategy and roadmap for Enterprise PaaS platform using Redhat Openshift and Data Middleware platform upgrades and lifecycle management. - Lead major version upgrades, cluster modernization, and infrastructure refresh initiatives across development, test, and production environments. - Establish standards, reference architectures, and best practices for platform lifecycle and security management. - Leverage Gen AI/Agentic AI to drive a fully automated pipeline for platform provisioning, upgrades, patching, and configuration management **Upgrades & Release Management** - Own end-to-end upgrade planning, governance, risk assessment, and execution. - Establish upgrade readiness processes, validation frameworks, rollback strategies, and post-upgrade monitoring. - Coordinate with application teams to ensure platform compatibility and minimize business disruption during upgrades. - Manage lifecycle risks associated with OpenShift, Kubernetes, operating systems, middleware, and supporting infrastructure. - Track and report platform currency and technology lifecycle compliance metrics. **Security & Compliance** - Establish and maintain a strong security posture across clusters and supporting infrastructure. - Lead vulnerability management, container image security, platform hardening, patch management, and remediation efforts. - Ensure compliance with enterprise security policies, regulatory requirements, and industry standards. - Partner with Information Security and Risk teams to manage security assessments, audits, and remediation activities. - Manage security exceptions and risk acceptance processes while driving long-term remediation strategies. **Capacity & Performance Management** - Own capacity planning and forecasting for Platform, including compute, memory, storage, and network resources. - Develop predictive capacity models to support business growth and application onboarding. - Establish monitoring and reporting processes for cluster utilization, performance, and scalability. - Optimize infrastructure consumption and platform efficiency while maintaining service-level objectives. - Lead resource optimization initiatives to improve workload density and reduce infrastructure costs. **Leadership & Team Management** - Build and lead high-performing cloud native DevOps engineers, Kubernetes administrators, security specialists, and capacity planners. - Foster a culture of operational excellence, continuous learning, innovation, and accountability. - Mentor leaders and technical experts within the organization. - Drive workforce planning, succession planning, and talent development initiatives. **Stakeholder & Vendor Management** - Serve as the senior technology leader for Private Cloud platform services. - Partner with application development, architecture, security, infrastructure, a…