Lead AI Identity & Access Architect

American Express Global Business Travel; Salt Lake City (UT); On-site; USD 104,000 - 194,000; Full time

Job summary

American Express Global Business Travel is seeking a Principal IAM AI Engineer to architect and lead secure identity solutions for AI-driven workflows. You will design authentication, authorization, and credential management across on-prem and cloud environments, aligning with risk, compliance, and business goals.

You will mentor engineers, collaborate with AI security teams, and drive governance for non-human identities while enabling safe AI adoption across the organization.

Qualifications

• 8+ years in IAM/cybersecurity with architect-level responsibility
• Experience designing identity, access and governance for non-human identities
• Strong cloud identity design experience at multi-account scale
• Hands-on with Okta and Saviynt
• Experience with privileged access management tools such as CyberArk and Vault

Responsibilities

• Architect and implement authentication/authorization infrastructure for AI-driven workloads
• Lead a team to build credential management and secret rotation systems
• Define policy and governance for machine identities and agent IAM
• Collaborate with AI/ML teams through all development phases to embed identity safeguards
• Roll out identity governance controls for human users as required by standards
• Ensure compliance, audit readiness and risk alignment with stakeholders
• Develop technical strategy and roadmap for machine identity programs

Skills

Identity infrastructure

Okta as IdP

Saviynt IGA

PAM (CyberArk)

AWS IAM design

OAuth/OIDC/SAML/JWT/mTLS

Non-human identities governance

Kubernetes security

Terraform/Python

Cross-functional leadership

Tools

CyberArk

HashiCorp Vault

Okta

Saviynt

Kubernetes

Terraform

Job description

American Express Global Business Travel is seeking a Principal IAM AI Engineer to architect and lead secure identity solutions for AI-driven workflows. You will design authentication, authorization, and credential management across on-prem and cloud environments, aligning with risk, compliance, and business goals.

You will mentor engineers, collaborate with AI security teams, and drive governance for non-human identities while enabling safe AI adoption across the organization.