IAM Engineer - AI Security

Design, implement, and manage IGA platform solutions (e.g., Saviynt) to ensure effective access controls, identity lifecycle management, and compliance; handle user provisioning, de-provisioning, and account modifications.

Configure and deploy IGA modules and connectors for various applications, platforms, and systems.

Execute access certification and review campaigns; perform entitlement clean-up and configure segregation-of-duties (SOD) rules.

Establish monitoring mechanisms for IAM activities and generate regular reports for audit and compliance purposes.

Work closely with customers and internal stakeholders to understand business requirements and translate them into IAM and AI security solutions.

Collaborate with other IAM team members, contributing to system support and knowledge sharing.

Execute reports and capture data for metrics; assist with tracking and producing IAM and AI governance KPIs.

Minimum 5 years of professional, hands-on experience in IAM, including experience with an IGA platform (e.g., Saviynt, SailPoint IdentityNow/IdentityIQ, Oracle Identity Manager, or similar).

Working knowledge of AI agent and non-human identity governance concepts: discovery, credential lifecycle management, runtime authorization, intent/behavioural validation, and AI-specific compliance frameworks.

Familiarity with modern authentication protocols and credential-less architectures, federated identity, short-lived/ephemeral tokens, and workload identity models.

Exposure to Model Context Protocol (MCP) or similar machine/model connectivity standards is a plus.

Hands-on experience onboarding connected and disconnected applications, including request forms, dynamic attributes, mapping, and data types.

Hands-on experience with REST & SOAP connectors, including JSON building, mapping, reconciliation, and provisioning use cases.

General understanding of Single Sign-On, Multi-Factor Authentication (MFA), and Privileged Access Management (PAM) & cloud technologies and tools.

Familiarity with industry regulations and standards (e.g., SOC2, ISO, SOX, PCI) and emerging AI governance frameworks.

Excellent analytical and problem-solving skills.

Prior AI/ML engineering exposure (e.g., Python, LLM or agent frameworks) is a nice-to-have but not required, and experience in coding / development of software applications is preferred.

Location

Work and life: Find your happy medium at Amex GBT.

Flexible benefits are tailored to each country and start the day you do. These include health and welfare insurance plans, retirement programs, parental leave, adoption assistance, and wellbeing resources to support you and your immediate family .

Travel perks: get a choice of deals each week from major travel providers on everything from flights to hotels to cruises and car rentals.

Develop the skills you want when the time is right for you, with access to over 20,000 courses on our learning platform, leadership courses, and new job openings available to internal candidates first.

We strive to champion Inclusion in every aspect of our business at Amex GBT. You can connect with colleagues through our global INclusion Groups, centered around common identities or initiatives, to discuss challenges, obstacles, achievements, and drive company awareness and action.

And much more!

A ll applicants will receive equal consideration for employment without regard to age, sex, gender (and characteristics related to sex and gender), pregnancy (and related medical conditions), race, color, citizenship, religion, disability, or any other class or characteristic protected by law.

Click Here for Additional Disclosures in Accordance with the LA County Fair Chance Ordinance.

Furthermore, we are committed to providing reasonable accommodation to qualified individuals with disabilities. Please let your recruiter know if you need an accommodation at any point during the hiring process. For details regarding how we protect your data, please consult the Amex GBT Recruitment Privacy Statement .