Principal AI Identity & Access Architect

American Express Global Business Travel; Augusta (ME); On-site; USD 104,000 - 194,000; Full time

Benefits offered by this job

Flexible benefits

Travel perks

Learning opportunities

Job summary

Amex GBT is seeking a Principal IAM AI Engineer to design and implement scalable identity and access controls for AI agents and humans in a global travel tech environment. The role combines IAM, AI agent governance, and product thinking to enable safe adoption of autonomous workflows.

You will lead a technical team, embed identity controls from day one of AI initiatives, and collaborate with AI security and development teams to ensure compliant, secure deployment at scale.

Qualifications

• 8+ years in IAM/cybersecurity, with 5+ years at architect or principal level owning target-state design for an enterprise security or identity domain.
• Proven experience designing identity, access, and governance controls for non-human identities — service accounts, workload identities, and AI agents — at enterprise scale.
• Strong AWS (or equivalent public cloud) identity and access design experience at multi-account scale.
• Hands-on experience with Okta (or comparable access management/federation platform) and Saviynt (or comparable IGA platform).
• Experience with privileged access management platforms such as Idira (formerly CyberArk) and HashiCorp Vault, or comparable tools.

Responsibilities

• Deploy and automate identity controls at runtime for human and non-human identities across the environment.
• Build, deploy, and automate lifecycle governance for agents and machine identities.
• Construct and operationalize credential management systems for AI-driven applications and agents, including secret cycling and short-lived credentials.
• Establish fine-grained, zero-standing-privilege access models for agents and workloads via IaC and policy frameworks.
• Collaborate with application development and ML teams to embed identity requirements and access controls during design.
• Lead rollout of identity governance controls for human users as required by standards.
• Coordinate with compliance, risk and audit to align controls with regulations and prepare audit evidence.
• Provide organizational technical strategy and direction for machine identity and agent IAM programs.

Skills

IAM architecture

Cloud IAM

Non-human identities

Leadership

Policy governance

Tools

Okta

Saviynt

CyberArk / Idira

HashiCorp Vault

Job description

Amex GBT is seeking a Principal IAM AI Engineer to design and implement scalable identity and access controls for AI agents and humans in a global travel tech environment. The role combines IAM, AI agent governance, and product thinking to enable safe adoption of autonomous workflows.

You will lead a technical team, embed identity controls from day one of AI initiatives, and collaborate with AI security and development teams to ensure compliant, secure deployment at scale.