Principal AI Identity Architect for Secure Agent IAM

American Express Global Business Travel; Montpelier (VT); On-site; USD 104,000 - 194,000; Full time

Benefits offered by this job

Flexible benefits

Travel perks

Professional development

Inclusion and employee resource groups

Job summary

American Express Global Business Travel is seeking a Principal IAM AI Engineer to lead identity and access architecture for AI agents and non-human identities. The role spans authentication, authorization, credential management, and compliance across multi-cloud environments, with leadership of a technical team and security-driven product thinking.

You will work at the intersection of IAM, AI-centric systems, and risk management, ensuring identity controls are embedded from day one in AI

Qualifications

• Deep expertise in enterprise identity infrastructure including PAM, IdP, and IGA.
• Strong AWS cloud identity design and least-privilege at scale.
• Mastery of OAuth/OIDC/SAML/SCIM/JWT and machine-to-machine identities.
• Experience governing non-human identities (service accounts, workload identities).

Responsibilities

• Design and operate authentication/authorization infrastructure and credential management.
• Lead governance for agents and machine identities, including lifecycle and reviews.
• Develop credential workflows for AI workloads with automated secret cycling.
• Implement fine-grained zero-trust access models via IaC and policy frameworks.
• Collaborate with AI/ML teams to embed identity controls in design phases.
• Roll out identity governance for human users per standards.
• Coordinate compliance, audit, and risk alignment with stakeholders.
• Build and lead an engineering team; set direction and roadmap for agent IAM.

Skills

PAM/CyberArk

Okta IdP

Saviynt IGA

AWS IAM design

OAuth/OIDC/SAML

JWT/mTLS

Non-human identities

Policy as Code

Kubernetes security

Cross-functional leadership

Tools

CyberArk (Idira)

HashiCorp Vault

Okta

Saviynt

Job description

American Express Global Business Travel is seeking a Principal IAM AI Engineer to lead identity and access architecture for AI agents and non-human identities. The role spans authentication, authorization, credential management, and compliance across multi-cloud environments, with leadership of a technical team and security-driven product thinking.

You will work at the intersection of IAM, AI-centric systems, and risk management, ensuring identity controls are embedded from day one in AI