Principal IAM AI Engineer - Secure, Scalable Identities

American Express Global Business Travel; Cheyenne (WY); On-site; USD 130,000 - 194,000; Full time

Job summary

American Express Global Business Travel seeks a Principal IAM AI Engineer to design and implement identity controls for AI agents and human users across hybrid and multi-cloud environments. You will lead a technical team, shape the security architecture from inception, and ensure secure adoption of AI-driven workflows with strong governance.

Responsibilities include building credential management, zero-trust policies, and integration with CI/CD pipelines.

Qualifications

• 8+ years in IAM/cybersecurity with 5+ years in architect or principal roles.
• Experience designing identity, access and governance for non-human identities.
• Strong AWS identity and access design at multi-account scale.
• Hands-on with Okta and Saviynt; experience with PAM tools like CyberArk.

Responsibilities

• Architect enterprise-scale identity security programs and governance for non-human identities.
• Lead a team to build and evolve machine identity and agent IAM capabilities.
• Collaborate with AI/ML teams to embed identity controls in design.
• Ensure compliance, risk alignment and audit readiness for IAM programs.

Skills

IAM architecture

Cloud IAM design

OAuth/OIDC/SAML

Non-human identities

Leadership & mentoring

Tools

CyberArk

Okta

Saviynt

HashiCorp Vault

AWS IAM

Job description

American Express Global Business Travel seeks a Principal IAM AI Engineer to design and implement identity controls for AI agents and human users across hybrid and multi-cloud environments. You will lead a technical team, shape the security architecture from inception, and ensure secure adoption of AI-driven workflows with strong governance.

Responsibilities include building credential management, zero-trust policies, and integration with CI/CD pipelines.