Principal AI IAM Architect for Secure Identity

American Express Global Business Travel; Austin (TX); On-site; USD 104,000 - 194,000; Full time

Benefits offered by this job

Flexible benefits

Travel perks

Skills development access

Job summary

American Express Global Business Travel is seeking a hands-on Principal IAM Engineer with an AI-first mindset to design and operate identity, access, and credentials for AI agents, copilots, and autonomous workflows across global travel technology platforms. You will lead a team to implement secure machine identities, policy-based access, and compliance tooling from day one.

Responsibilities include lifecycle governance for machine identities, credential workflows for AI workloads, and

Qualifications

• 8+ years in IAM/cybersecurity, with 5+ years at architect or principal level owning target-state design for an enterprise security or identity domain.
• Proven experience designing identity, access, and governance controls for non-human identities — service accounts, workload identities, and AI agents — at enterprise scale.
• Strong AWS (or equivalent public cloud) identity and access design experience at multi-account scale.
• Hands-on experience with Okta and Saviynt.
• Experience with privileged access management platforms such as CyberArk (Idira) and HashiCorp Vault.

Responsibilities

• Lead access control execution across environments with real-time policy enforcement.
• Architect lifecycle governance for machine identities and agents.
• Build credential workflows for AI workloads with automated secret life cycle.
• Define zero-trust, policy-driven authorization for non-human workloads.
• Collaborate with AI and application teams to integrate identity into the development lifecycle.
• Roll out end-user identity governance controls per standards and audits.
• Partner with Compliance, Risk and Audit to align with regulations.
• Drive organization-wide technical strategy and delivery roadmap for IAM programs.

Skills

IAM architecture

Access control

Non-human identities

Cloud identity (AWS)

OIDC/SAML/OAuth

IaC & policies

Leadership & strategy

Tools

Okta

Saviynt

CyberArk/Idira

HashiCorp Vault

AWS IAM

Job description

American Express Global Business Travel is seeking a hands-on Principal IAM Engineer with an AI-first mindset to design and operate identity, access, and credentials for AI agents, copilots, and autonomous workflows across global travel technology platforms. You will lead a team to implement secure machine identities, policy-based access, and compliance tooling from day one.

Responsibilities include lifecycle governance for machine identities, credential workflows for AI workloads, and