Principal IAM AI Engineer—Secure AI Identities & Access

American Express Global Business Travel; Augusta (ME); On-site; USD 104,000 - 194,000; Full time

Benefits offered by this job

Flexible benefits

Travel perks

Learning & development opportunities

Inclusion Groups

Job summary

Amex GBT is seeking a hands-on Principal IAM AI Engineer to design identity architecture for AI agents, copilots, and autonomous workflows. You’ll lead a team, implement access controls, credentials, and compliance across global travel tech platforms, and collaborate with AI and ML teams from design to deployment.

The role emphasizes zero-trust principles, policy-driven governance, and end-to-end identity lifecycle management for non-human identities and human users.

Qualifications

• 8+ years in IAM/cybersecurity with 5+ years in architect/principal roles.
• Experience designing identity, access and governance for non-human identities at enterprise scale.
• Strong AWS identity design experience across multi-account environments.
• Hands-on with Okta, Saviynt, CyberArk or comparable platforms.

Responsibilities

• Deploy and automate runtime identity controls across environments.
• Govern machine identities, lifecycle, credentials, and access reviews.
• Build credential workflows for AI workloads and secure distribution.
• Implement fine-grained access models with IaC and policy tooling.
• Collaborate with AI/ML teams to embed identity in the development lifecycle.
• Roll out end-user identity governance in line with policies.
• Coordinate audits, regulatory reporting, and risk alignment.
• Lead engineering direction and delivery roadmap for IAM programs.

Skills

IAM/cybersecurity

cloud identity

non-human identities governance

OWASP/OIDC/SAML/SCIM/JWT/mTLS

leadership & cross-functional comms

Tools

Okta

Saviynt

CyberArk

HashiCorp Vault

Job description

Amex GBT is seeking a hands-on Principal IAM AI Engineer to design identity architecture for AI agents, copilots, and autonomous workflows. You’ll lead a team, implement access controls, credentials, and compliance across global travel tech platforms, and collaborate with AI and ML teams from design to deployment.

The role emphasizes zero-trust principles, policy-driven governance, and end-to-end identity lifecycle management for non-human identities and human users.