AI-First IAM Architect for Non-Human Identities

American Express Global Business Travel; Carson City (NV); On-site; USD 104,000 - 194,000; Full time

Benefits offered by this job

Flexible benefits

Travel perks

Learning platform access

Inclusion Groups

Job summary

Amex GBT in the United States is hiring a Principal IAM AI Engineer to shape identity architecture for AI agents and non-human workloads, blending IAM with AI governance. You will design scalable authentication, authorization, and credential systems while guiding a technical team through complex cloud and on-prem environments.

You will partner with AI and application teams from inception, embedding identity controls in the design, and ensuring compliance, risk management, and audit readiness.

Qualifications

• 8+ years in IAM/cybersecurity with target-state design ownership.
• Experience designing identity, access, and governance for non-human identities.
• Strong AWS identity and least-privilege design at multi-account scale.
• Hands-on with Okta and Saviynt; familiarity with CyberArk or equivalent.

Responsibilities

• Deploy and automate identity controls at runtime for access and authorization.
• Govern machine identities and agent lifecycle, including credential management.
• Build credential workflows for AI workloads with secret cycling and issuance.
• Establish zero-trust policies for agents and workloads via IaC and policy tooling.
• Collaborate with AI/ML teams to embed identity requirements in design.
• Mentor engineers on non-human identity patterns and security best practices.

Skills

IAM architecture

Okta

Saviynt

CyberArk

AWS IAM design

OIDC/SAML

Tools

Okta

Saviynt

CyberArk

HashiCorp Vault

Job description

Amex GBT in the United States is hiring a Principal IAM AI Engineer to shape identity architecture for AI agents and non-human workloads, blending IAM with AI governance. You will design scalable authentication, authorization, and credential systems while guiding a technical team through complex cloud and on-prem environments.

You will partner with AI and application teams from inception, embedding identity controls in the design, and ensuring compliance, risk management, and audit readiness.