Principal IAM & AI Security Architect

American Express Global Business Travel; Phoenix (AZ); Hybrid; USD 104,000 - 194,000; Full time

Benefits offered by this job

Flexible benefits

Travel perks

Professional development opportunities

Job summary

Amex GBT is seeking a hands-on Principal IAM AI Engineer to design and lead identity architecture for AI agents, copilots, and autonomous workflows across global travel technology. You will own authentication, authorization, credential management, and compliance for responsible AI deployment.

You’ll oversee lifecycle governance for machine identities, implement zero-trust policies, and collaborate with AI development teams to embed identity controls from design through deployment.

Qualifications

• 8+ years in IAM/cybersecurity with 5+ years at architect/principal level owning target-state design.
• Proven experience designing identity, access, and governance for non-human identities at scale.
• Strong AWS/cloud identity design experience in multi-account environments.

Responsibilities

• Implement and automate identity controls at runtime for non-human identities.
• Govern machine identities, credential lifecycles, and access reviews across environments.
• Develop credential management for AI workloads with secret rotation and secure distribution.
• Define fine-grained, zero-trust access models for agents and workloads using IaC and policy frameworks.
• Collaborate with application and ML teams to embed identity requirements in the AI lifecycle.
• Roll out identity governance controls for human users as required by standards.
• Coordinate compliance, risk, and audit activities and enable regulatory reporting.
• Lead and mentor engineering teams to set direction and roadmap for IAM programs.

Skills

IAM architecture

PAM

OAuth/OIDC/SAML

Cloud IAM

Leadership

Communication

Tools

Okta

Saviynt

CyberArk/Idirа

HashiCorp Vault

Job description

Amex GBT is seeking a hands-on Principal IAM AI Engineer to design and lead identity architecture for AI agents, copilots, and autonomous workflows across global travel technology. You will own authentication, authorization, credential management, and compliance for responsible AI deployment.

You’ll oversee lifecycle governance for machine identities, implement zero-trust policies, and collaborate with AI development teams to embed identity controls from design through deployment.