AI-Identity Architect: Secure Agent & Workload IAM

American Express Global Business Travel; Columbus (OH); On-site; USD 104,000 - 194,000; Full time

Benefits offered by this job

Flexible benefits

Travel perks

Professional development

Job summary

Amex GBT is seeking a hands-on Principal IAM AI Engineer to build identity architecture for AI agents, copilots, and autonomous workflows across global travel tech. You will lead security for authentication, authorization, credentials, and compliance, and guide a team to evolve the program.

The role integrates with AI initiative planning from day one, ensuring identity controls and secrets management enable safe adoption.

Qualifications

• 8+ years in IAM/cybersecurity; architect level ownership of enterprise security.
• Experience designing identity, access and governance for non-human identities at scale.
• Strong AWS identity & access design in multi-account environments.
• Hands-on with Okta and Saviynt; familiarity with CyberArk/HashiCorp Vault.

Responsibilities

• Deploy and automate identity controls at runtime for non-human identities and users.
• Build lifecycle governance for agents and machine identities; manage permissions and credentials.
• Develop credential workflows for AI workloads, including short-lived credentials and secure distribution.
• Establish fine-grained, zero-standing-privilege access models with IaC and policy frameworks.
• Collaborate with development teams to embed identity controls in AI initiatives from design phase.
• Lead the engineering team and set technical direction for machine identity programs.
• Coordinate with compliance and risk teams for audits and regulatory reporting.

Skills

IAM architecture

Cloud identity design

Cross-functional leadership

Communication

Education

Bachelor's degree in a technical field

Tools

Okta

Saviynt

CyberArk/Idira

HashiCorp Vault

Job description

Amex GBT is seeking a hands-on Principal IAM AI Engineer to build identity architecture for AI agents, copilots, and autonomous workflows across global travel tech. You will lead security for authentication, authorization, credentials, and compliance, and guide a team to evolve the program.

The role integrates with AI initiative planning from day one, ensuring identity controls and secrets management enable safe adoption.