Sr. Middleware Platform Engineer

Amex GBT is a place where colleagues find inspiration in travel as a force for good and – through their work – can make an impact on our industry. We’re here to help our colleagues achieve success and offer an inclusive and collaborative culture where your voice is valued.

The Senior Enterprise Middleware Engineer is responsible for architecting, design and implement platform engineering solutions for middleware platforms. You will also lead the reliability, security, and performance of enterprise integration and messaging platforms, including Go Anywhere MFT , AWS Elasti Cache , AWS MSK (Kafka) , and IBM MQ .What You’ll DoAdminister, configure, and support Go Anywhere MFT (workflows, secure file transfers, keys/certs, user/partner onboarding, scheduling, auditing).Operate

and maintain AWS MSK (Kafka) clusters (brokers, topics, partitions, replication, retention policies, upgrades/patching, client connectivity).Administer IBM MQ environments (Queue Managers, channels, queues, clustering, SSL/TLS, HA/DR, monitoring, performance tuning).Manage AWS Elasti Cache (Redis/Memcached) including scaling, failover, backups/snapshots, parameter tuning, and performance optimization.

Ensure high availability, resilience, and disaster recovery readiness (RTO/RPO alignment, failover tests, runbooks).Work with application teams on integration patterns, client configuration, connectivity troubleshooting, and best practices.

Coordinate with Info Sec, Networking, and Cloud Platform teams on secure network paths (VPC, subnets, security groups, NACLs, private endpoints).Implement and maintain TLS/mTLS , certificate lifecycle management, encryption standards, secrets management, and secure authentication/authorization.

Support compliance requirements (audit logging, access reviews, change control, least privilege).Partner onboarding/offboarding for MFT and secure integration endpoints.

What We’re Looking For5 - 7 years’ experience in middleware/integration/platform engineering roles supporting production systems.

Hands-on administration experience (6
-7 Years) with at least two of the following:
Kafka (AWS MSK) , Go Anywhere MFT , AWS Elasti Cache (Redis/Memcached) , IBM MQStrong understanding of messaging/integration concepts: queues/topics, pub-sub, delivery semantics, ordering, retries, dead-letter handling, and back-pressure.
5 - 7 Years of experience with Linux administration, networking fundamentals (DNS, TLS, firewalls, ports), and troubleshooting distributed systems.

Working knowledge of AWS core services and constructs: VPC, IAM, EC2, Cloud Watch, security groups, KMS, Secrets Manager/Parameter Store.

Production support experience including incident management , RCA, and change/release processes.

Scripting/automation skills (Python/Shell) and familiarity with IaC (Terraform/Cloud Formation).Excellent documentation and communication skills; ability to work cross-functionally.

Preferred Qualifications Deep expertise in one or more platforms:

IBM MQ : MQ clustering, multi-instance QM, AMS, advanced channel auth records (CHLAUTH), TLS mutual auth.

Kafka/MSK : broker sizing, partitioning strategy, consumer lag tuning, ACLs/SASL, schema registry patterns, Mirror Maker/replication.

Go Anywhere MFT : advanced workflows, API integration, PGP automation, partner lifecycle management, compliance auditing.

Elasti Cache Redis : clustering/sharding, replication groups, persistence strategy (AOF/RDB), latency tuning.

Experience implementing DR strategies and performing resiliency testing (game days / failover drills).Certifications (nice-to-have): AWS Certified Sys Ops/Dev Ops, IBM MQ certification, Confluent/Kafka training, security fundamentals.

Monitoring, Incident Response, and Problem Management Build and maintain observability: metrics, logs, traces, dashboards, and alerts for Kafka/MQ/MFT/Cache.

Handle production incidents, perform root cause analysis (RCA), implement corrective/preventative actions, and drive service improvements.

Provide on-call support and follow operational excellence practices (post-incident reviews, trend analysis).Tune MQ/Kafka performance (batching, compression, partition strategy, consumer lag management)…