AI-First IAM Architect for Enterprise Agent Security

American Express Global Business Travel; Honolulu (HI); On-site; USD 104,000 - 194,000; Full time

Benefits offered by this job

Flexible benefits

Travel perks

Learning platform access

Inclusion groups

Job summary

American Express Global Business Travel is seeking a Principal IAM AI Engineer in the United States to lead machine identity and agent IAM programs. You will design secure identity controls, govern non-human identities, and collaborate with AI and development teams to embed identity considerations from design through deployment.

You will guide a technical team, implement credential workflows for AI workloads, and align controls with regulatory standards while enabling AI initiatives and secure

Qualifications

• 8+ years in IAM/cybersecurity with 5+ years at architect or principal level owning target-state design for an enterprise security or identity domain.
• Proven experience designing identity, access, and governance controls for non-human identities — service accounts, workload identities, and AI agents — at enterprise scale.
• Strong AWS (or equivalent public cloud) identity and access design experience at multi-account scale.
• Hands-on experience with Okta (or comparable access management/federation platform) and Saviynt (or comparable IGA platform).
• Experience with privileged access management platforms such as Idira (formerly CyberArk) and HashiCorp Vault, or comparable tools.

Responsibilities

• Deploy and automate identity controls at runtime for NHI identity - including immediate authentication verification, access authorization, and real-time rule application across the environment.
• Build, deploy, and automate lifecycle governance for agents and machine identities - spanning discovery and registration, permission assignment, credential lifecycle, periodic access reviews, and secure retirement.
• Construct and operationalize credential management systems for AI-driven applications and agents, encompassing automated secret cycling, short-lived credential issuance, and protected distribution to runtime environments.
• Establish and implement fine-grained, zero-standing-privilege access models for agents and workloads, documented and managed through infrastructure-as-code and policy declaration frameworks.
• Collaborate with application development and ML teams throughout all AI initiative phases, ensuring identity requirements, credential handling, and access controls are incorporated during design rather than retrofitted.
• Facilitate implementation and adoption of identity governance controls for human users as required by organizational standards.
• Work with compliance, risk and audit functions to confirm controls align with regulatory requirements and internal policies; facilitate audit evidence generation and regulatory reporting.
• Lead an engineering team supporting these initiatives; establish technical direction, strategic priorities and delivery roadmap for machine identity and agent IAM programs.

Job description

American Express Global Business Travel is seeking a Principal IAM AI Engineer in the United States to lead machine identity and agent IAM programs. You will design secure identity controls, govern non-human identities, and collaborate with AI and development teams to embed identity considerations from design through deployment.

You will guide a technical team, implement credential workflows for AI workloads, and align controls with regulatory standards while enabling AI initiatives and secure