Principal AI Identity & Access Architect

American Express Global Business Travel; Richmond (VA); On-site; USD 104,000 - 194,000; Full time

Benefits offered by this job

Discretionary annual bonus

Flexible benefits

Job summary

American Express Global Business Travel is seeking a Principal IAM AI Engineer who brings an AI-first mindset to identity architecture. You will shape authentication, authorization, and credential management for AI agents and human users in a global travel platform.

In this hands-on role, you will architect security controls across multi-cloud environments, lead a technical team, and embed identity governance in AI initiatives from design to deployment.

Qualifications

• 8+ years in IAM/cybersecurity, with architect-level ownership of target-state design for enterprise security or identity.
• Proven experience designing identity, access, and governance for non-human identities—service accounts, workload identities, and AI agents.
• Strong AWS cloud identity and access design at multi-account scale.
• Hands-on experience with Okta, Saviynt, CyberArk or equivalent tools.

Responsibilities

• Define and lead enterprise IAM/AI identity strategy and roadmaps.
• Architect and implement authentication, authorization, and credential management for AI agents and workloads.
• Partner with security, risk, and compliance to ensure regulatory alignment and auditable controls.
• Mentor engineers on non-human identity patterns and secure machine identity governance.

Skills

PAM/CyberArk

Okta IdP

Saviynt IGA

OAuth/OIDC/SAML

AWS IAM design

Non-human identities

Kubernetes workload identity

Tools

Okta

Saviynt

CyberArk

HashiCorp Vault

Job description

American Express Global Business Travel is seeking a Principal IAM AI Engineer who brings an AI-first mindset to identity architecture. You will shape authentication, authorization, and credential management for AI agents and human users in a global travel platform.

In this hands-on role, you will architect security controls across multi-cloud environments, lead a technical team, and embed identity governance in AI initiatives from design to deployment.