IAM AI Architect: Enterprise Agent Security Lead

American Express Global Business Travel; Salem (OR); On-site; USD 104,000 - 194,000; Full time

Benefits offered by this job

Flexible benefits

Travel perks

Learning & development programs

Job summary

American Express Global Business Travel seeks a Principal IAM AI Engineer to design scalable identity architectures for AI agents and human users. You will lead authentication, authorization, and credential management across hybrid environments, aligning with risk, compliance, and product goals.

You will collaborate with AI and application teams from inception, embedding identity requirements in the design.

Qualifications

• 8+ years in IAM/cybersecurity, with 5+ years as architect/principal owning target-state design.
• Experience designing identity, access, and governance for non-human identities (service accounts, workload identities, AI agents).
• Strong AWS identity and access design at multi-account scale.

Responsibilities

• Deploy and automate identity controls at runtime for enterprise environments.
• Govern machine identities and agent lifecycle, including credential management and access reviews.
• Design and operate credential workflows for AI workloads and agent systems.
• Establish zero-standing-privilege access models for agents and workloads.
• Collaborate with application and ML teams to embed identity controls in design phases.
• Lead the engineering team delivering IAM programs and roadmaps.
• Mentor engineers on non-human identity patterns and security practices.

Skills

IAM architecture

Cloud IAM (AWS)

Okta

Saviynt

PAM (CyberArk)

Policy as code

Leadership

Cross-functional communication

Tools

CyberArk

HashiCorp Vault

Okta

Saviynt

AWS IAM

Job description

American Express Global Business Travel seeks a Principal IAM AI Engineer to design scalable identity architectures for AI agents and human users. You will lead authentication, authorization, and credential management across hybrid environments, aligning with risk, compliance, and product goals.

You will collaborate with AI and application teams from inception, embedding identity requirements in the design.