Cybersecurity Architect — Cloud, AI & Risk Governance

American Express Global Business Travel; Cheyenne (WY); On-site; USD 104,000 - 194,000; Full time

Benefits offered by this job

Flexible benefits

Travel perks

Learning platform access

Inclusion Groups

Job summary

Amex GBT is seeking a Cyber Security Architect to embed security into how we design and build technology across travel platforms, payments, and data protection. You will review solutions, model threats, and translate findings into actionable mitigations for engineering teams.

You’ll lead cloud security, data protection, and supplier risk, develop reference architectures, and partner with product, engineering, and enterprise teams to balance risk, speed, and compliance.

Qualifications

• 8+ years in cybersecurity, with meaningful time spent in a security architecture or senior security engineering role.
• Hands-on experience designing or reviewing architecture for cloud-based systems (AWS, Azure, or GCP).
• Strong grounding in application security, network security, and IAM including least-privilege and Zero Trust.
• Experience applying threat modeling methodologies and translating findings into practical design changes.
• Working knowledge of regulations and standards such as PCI DSS, GDPR, ISO 27001.
• Ability to translate technical risk into terms non-technical stakeholders can act on and influence decisions.
• Bachelor's degree in a related field or equivalent experience.

Responsibilities

• Review designs for new products, platforms, and major changes using structured threat modeling to find risks, gaps, and single points of failure.
• Turn findings into actionable recommendations balancing risk, cost, and timelines.
• Own the review process, define secure thresholds at design stages, and produce reference architectures and reusable patterns.
• Set standards for cloud environments (AWS, Azure, GCP), including IAM, encryption, and secrets management.
• Guide secure API/microservices design with authentication, authorization, and rate limiting.
• Protect traveler and payment data across its lifecycle, advocating privacy-by-design.

Skills

Security architecture

Cloud security

Threat modeling

Zero Trust

Regulatory standards

Executive communication

AI security

Education

Bachelor's degree in a related field

Tools

CISSP

SABSA

TOGAF

CCSP

Azure Security Engineer

Job description

Amex GBT is seeking a Cyber Security Architect to embed security into how we design and build technology across travel platforms, payments, and data protection. You will review solutions, model threats, and translate findings into actionable mitigations for engineering teams.

You’ll lead cloud security, data protection, and supplier risk, develop reference architectures, and partner with product, engineering, and enterprise teams to balance risk, speed, and compliance.