Senior Cybersecurity Engineer-IAM​/Cloud Security; AI Agent security

A Senior Cyber Security Engineer for Agentic AI IAM, and Secrets Management is responsible for securing enterprise identities, AI agents, machine identities, and secrets across hybrid environments including on-premises infrastructure and public cloud platforms.

• Build a modern, scalable, and resilient Agentic AI IAM and secrets management ecosystem across hybrid cloud environments.
• Enable secure adoption of AI agents, automation platforms, and machine identities through policy-driven governance.
• Drive Enterprise-Wide Risk Reduction Initiatives for Application Secrets Management
  • Elimination of Hardcoded Secrets
  • Centralized Enterprise Secrets Vault Adoption
  • Automated Secrets Rotation
  • Machine Identity and Workload Identity Modernization
  • CI/CD and Dev Sec Ops  Secrets Security
  • Cloud-Native Secrets Governance
  • Enterprise Secrets Discovery and Inventory
  • Secrets Access Monitoring and Behavioral Analytics
  • Zero Trust Application Authentication
  • Third-Party and Vendor Secrets Governance
  • AI Agent and Autonomous Workflow Secrets Security
• Deliver centralized visibility, compliance, and operational excellence for identities and access management including sustained controls and metrics delivery

• Strong experience in Agentic AI IAM architecture, identity governance, secrets management, security engineering, and enterprise IAM program delivery.
• Strong expertise in requirement gathering, current-state assessments, gap analyses, control evaluations, and target-state Agentic AI IAM security architecture design.
• Experience securing cloud-native and hybrid environments.
• Knowledge of Zero Trust architecture and machine identity security.
• Experience implementing AI/Agentic security controls and secure automation frameworks.

• Microsoft Entra  / Okta
• Hashi Corp Vault, AWS Secrets Manager, Google Cloud Secrets Manager
• AWS, Azure, Google Cloud Platform
• Kubernetes and container security platforms
• Terraform, CI/CD, Dev Sec Ops  tooling

• Conduct Agentic AI IAM requirement analyses, architecture reviews, and security gap assessments across enterprise applications, cloud platforms, AI services, and infrastructure environments.
• Develop automation for access management and secrets lifecycle operations.
• Develop and implement security controls for AI agents, machine identities, APIs, workloads, and autonomous workflows.
• Monitor and remediate IAM and secrets-related risks.
• Build dashboards, reporting, and operational metrics.

• Lead enterprise Agentic AI IAM program execution across multiple work streams.
• Establish program milestones, sprint objectives, and delivery timelines.
• Track program risks, issues, blockers, and remediation activities.
• Ensure successful onboarding of applications, platforms, and cloud services into IAM controls.
• Drive operationalization and transition to support teams.

• Establish security controls for AI agents, autonomous workflows, bots, and machine identities.
• Define policy-based authorization models for AI-driven systems.
• Secure API, workload, and machine-to-machine authentication.
• Monitor AI agent activities and machine identity risks.

• Secure IAM controls across AWS, Azure, GCP, Kubernetes, and on-prem environments.
• Standardize identity governance across multi-cloud ecosystems.
• Implement workload identity federation and cloud-native security controls.

• Monitor identity threats, privilege misuse, and secrets exposure.
• Support incident response and remediation activities.
• Ensure compliance with enterprise security standards and regulatory frameworks.
• Produce audit evidence and governance reporting.

• Bachelor’s degree in Cyber security, Computer Science, Information Technology, or related discipline.
• 5+ years of experience in IAM, cloud security, or cyber security engineering.
• Strong understanding of AI agent security, machine identities, and secure automation.
• Experience managing hybrid cloud IAM and secrets management programs.
• Relevant certifications preferred:
  • CISSP
  • CISM
  • CCSP

Employment eligibility to work with American Express in the United States is required as the company will not pursue visa sponsorship for these positions.