Principal IAM Architect for AI Agents & Secure Workflows

American Express Global Business Travel; Annapolis (MD); On-site; USD 104,000 - 194,000; Full time

Benefits offered by this job

Flexible benefits

Travel perks

Learning & development access

Inclusion groups

Job summary

Amex Global Business Travel seeks a hands-on Principal IAM Engineer to build identity architecture for AI agents, copilots, and autonomous workflows across global travel technology. You will implement authentication, authorization, credential management, and compliance infra to enable safe AI adoption and lead a technical team.

You’ll collaborate with AI and application teams through design, development, and deployment, ensuring identity controls align with internal policies and regulatory

Qualifications

• 8+ years in IAM/cybersecurity with architect or principal experience.
• Experience designing identity, access, and governance for non-human identities at enterprise scale.
• Strong AWS identity design experience across multi-account environments.
• Hands-on with Okta and Saviynt (or equivalents) and CyberArk/HashiCorp Vault.

Responsibilities

• Deploy and automate identity controls at runtime for human and non-human identities.
• Build lifecycle governance for agents and machine identities, including credential rotation and reviews.
• Design credential workflows for AI workloads with short-lived credentials and secure distribution.
• Define fine-grained authorization and policy frameworks using IaC and policy engines.

Skills

IAM/Identity security

Enterprise IAM

AWS IAM

Non-human identities

Leadership & collaboration

Education

Bachelor's degree in CS or related

Tools

Okta

Saviynt

CyberArk

HashiCorp Vault

Job description

Amex Global Business Travel seeks a hands-on Principal IAM Engineer to build identity architecture for AI agents, copilots, and autonomous workflows across global travel technology. You will implement authentication, authorization, credential management, and compliance infra to enable safe AI adoption and lead a technical team.

You’ll collaborate with AI and application teams through design, development, and deployment, ensuring identity controls align with internal policies and regulatory