AI-First IAM Architect for Enterprise Security

American Express Global Business Travel; Lansing (MI); On-site; USD 104,000 - 194,000; Full time

Benefits offered by this job

Flexible benefits

Travel perks

Skills development platform

Inclusion groups

Job summary

American Express Global Business Travel is seeking a Principal IAM AI Engineer to design and lead the security architecture for AI-driven identities and agents across the organization. You will own authentication, authorization, and credential management, ensuring seamless yet secure access for human and non-human actors.

You will shape policy, tooling, and practices to enable safe AI deployment while meeting regulatory requirements.

Qualifications

• 8+ years in IAM/cybersecurity with at least 5 years in architect/principal role
• Experience designing identity, access and governance for non-human identities at enterprise scale
• Strong AWS/ cloud IAM design experience at multi-account scale
• Hands-on experience with Okta and Saviynt or similar platforms
• Knowledge of PAM, secrets management, and workload identity across environments

Responsibilities

• Design and deploy authentication and authorization infrastructure
• Lead lifecycle governance for machine identities and agents
• Implement credential management for AI workloads and short-lived credentials
• Develop granular, zero-trust access models for non-human identities
• Collaborate with development and ML teams to embed identity controls
• Rollout identity governance controls for human users
• Coordinate with compliance and audit for regulatory alignment
• Lead engineering team and set technical direction for IAM programs

Skills

PAM (CyberArk)

Okta IdP

IGA platforms

OAuth/OIDC/SAML

Tools

Saviynt

HashiCorp Vault

CyberArk/Idira

Kubernetes security

Terraform

Job description

American Express Global Business Travel is seeking a Principal IAM AI Engineer to design and lead the security architecture for AI-driven identities and agents across the organization. You will own authentication, authorization, and credential management, ensuring seamless yet secure access for human and non-human actors.

You will shape policy, tooling, and practices to enable safe AI deployment while meeting regulatory requirements.