Senior Cybersecurity Engineer-IAM And/ OR Cloud Security (AI Agent security)

Joining Amex Tech means discovering and shaping your contribution to something big. Here, you can work alongside talented tech teams and build a unique career with the Powerful Backing of American Express. With a range of opportunities to work with the latest technologies, and a commitment to back the broader engineering community through open source, our mission is to power your success. Because Amex Tech is powered by our technology, our culture, and our colleagues. The Technology organization enables and accelerates the company’s growth strategies, delivering global capabilities and services in support of Amex’s customers and colleagues, while maintaining 24/7 servicing and availability to ensure an uninterrupted, high-quality customer experience. Technology provides the foundation for everything we do in the company while driving differentiation through building and leveraging innovative technology and data insights. At American Express, our mission is to deliver the world’s best customer experience every day. At the heart of this mission is our Information Security organization, enabling exceptional experiences built on a foundation of trust, service, and security. We leverage advanced technologies and data-driven insights to stay ahead of an evolving threat landscape. We foster a culture of passion, curiosity, and courage—empowering you to innovate, grow, and help shape the future of a Fortune 100 company. Trust. Service. Security. A Senior Cyber Security Engineer for Agentic AI IAM, and Secrets Management is responsible for securing enterprise identities, AI agents, machine identities, and secrets across hybrid environments including on-premises infrastructure and public cloud platforms. This role leads the design, implementation, governance, and operational management of identity security capabilities that support Zero Trust principles, secure automation, and enterprise-wide access governance. The role is accountable for translating enterprise security objectives into measurable security outcomes, operational KPIs, delivery milestones, and progressive risk reduction strategies. This includes defining security maturity targets, driving execution roadmaps, establishing measurable controls effectiveness, and continuously improving identity and secrets management posture across the organization. The individual partners closely with infrastructure, cloud, DevOps, application, and risk teams to establish scalable identity controls, secure secrets management practices, resilient authentication and authorization architectures, and sustainable governance models that balance security, operational efficiency, and business enablement. Vision * Build a modern, scalable, and resilient Agentic AI IAM and secrets management ecosystem across hybrid cloud environments. * Enable secure adoption of AI agents, automation platforms, and machine identities through policy-driven governance. * Drive Enterprise-Wide Risk Reduction Initiatives for Application Secrets Management

• Elimination of Hardcoded Secrets
• Centralized Enterprise Secrets Vault Adoption
• Automated Secrets Rotation
• Machine Identity and Workload Identity Modernization
• CI/CD and DevSecOps Secrets Security
• Cloud-Native Secrets Governance
• Enterprise Secrets Discovery and Inventory
• Secrets Access Monitoring and Behavioral Analytics
• Zero Trust Application Authentication
• Third-Party and Vendor Secrets Governance
• AI Agent and Autonomous Workflow Secrets Security
• Deliver centralized visibility, compliance, and operational excellence for

identities and access management including sustained controls and metrics delivery Functional Requirements/ Core Technical Capabilities * Strong experience in Agentic AI IAM architecture, identity governance, secrets management, security engineering, and enterprise IAM program delivery. * Strong expertise in requirement gathering, current-state assessments, gap analyses, control evaluations, and target-state Agentic AI IAM security architecture design.

• Experience securing cloud-native and hybrid environments.
• Knowledge of Zero Trust architecture and machine identity security.
• Experience implementing AI/Agentic security controls and secure automation

frameworks. Platform Experience

• Microsoft Entra ID / Okta
• HashiCorp Vault, AWS Secrets Manager, Google cloud secrets manager
• AWS, Azure, Google Cloud Platform
• Kubernetes and container security platforms
• Terraform, CI/CD, DevSecOps tooling