AI-First IAM Architect for Enterprise Security

American Express Global Business Travel

Boise (ID)

On-site

USD 104,000 - 194,000

Full time

3 days ago

Be an early applicant

Application generator

Stand out for this role — generate a tailored resume and cover letter in about a minute.

Get past ATS filters

Benefits offered by this job

Flexible benefits

Travel perks

Skills development

Job summary

Amex GBT in the United States is seeking a Principal IAM AI Engineer who brings an AI-first mindset to identity architecture. You will design scalable access for AI agents, integrate with IAM, and lead a technical team to embed identity controls from day one.

This role combines engineering, risk, and product thinking across booking platforms, traveler data protection, and supplier integrations. You will implement authentication, authorization, and credential management for AI workloads and

Qualifications

8+ years in IAM/cybersecurity, with 5+ years at architect/principal level.
Experience designing identity, access and governance for non-human identities — service accounts, workload identities, AI agents.
Strong AWS or equivalent cloud identity design at multi-account scale.
Hands-on with Okta and Saviynt, plus PAM tools like CyberArk or HashiCorp Vault.
Familiarity with OAuth, OIDC, SAML, SCIM, JWT, and mTLS.

Responsibilities

Architect enterprise-scale identity security programs and govern non-human identities.
Lead engineering team and set technical direction for machine identity and agent IAM.
Embed identity controls and secrets management into AI initiatives from design through deployment.
Collaborate with AI/ML teams across all initiative phases and ensure policy compliance.