Job DescriptionA
Senior Cyber Security Engineer for Agentic AI IAM, and Secrets Management is responsible for securing enterprise identities, AI agents, machine identities, and secrets across hybrid environments including on-premises infrastructure and public cloud platforms.
This role leads the design, implementation, governance, and operational management of identity security capabilities that support Zero Trust principles, secure automation, and enterprise-wide access governance.
The role is accountable for translating enterprise security objectives into measurable security outcomes, operational KPIs, delivery milestones, and progressive risk reduction strategies. This includes defining security maturity targets, driving execution roadmaps, establishing measurable controls effectiveness, and continuously improving identity and secrets management posture across the organization.
The individual partners closely with infrastructure, cloud, DevOps, application, and risk teams to establish scalable identity controls, secure secrets management practices, resilient authentication and authorization architectures, and sustainable governance models that balance security, operational efficiency, and business enablement.
Vision- Build a modern, scalable, and resilient Agentic AI IAM and secrets management ecosystem across hybrid cloud environments.
- Enable secure adoption of AI agents, automation platforms, and machine identities through policy-driven governance.
- Drive Enterprise-Wide Risk Reduction Initiatives for Application Secrets Management
- Elimination of Hardcoded Secrets
- Centralized Enterprise Secrets Vault Adoption
- Automated Secrets Rotation
- Machine Identity and Workload Identity Modernization
- CI/CD and DevSecOps Secrets Security
- Cloud-Native Secrets Governance
- Enterprise Secrets Discovery and Inventory
- Secrets Access Monitoring and Behavioral Analytics
- Zero Trust Application Authentication
- Third-Party and Vendor Secrets Governance
- AI Agent and Autonomous Workflow Secrets Security
- Deliver centralized visibility, compliance, and operational excellence for identities and access management including sustained controls and metrics delivery
Functional Requirements/ Core Technical Capabilities- Strong experience in Agentic AI IAM architecture, identity governance, secrets management, security engineering, and enterprise IAM program delivery.
- Strong expertise in requirement gathering, current-state assessments, gap analyses, control evaluations, and target-state Agentic AI IAM security architecture design.
- Experience securing cloud-native and hybrid environments.
- Knowledge of Zero Trust architecture and machine identity security.
- Experience implementing AI/Agentic security controls and secure automation frameworks.
Platform Experience- Microsoft Entra ID / Okta
- HashiCorp Vault, AWS Secrets Manager, Google cloud secrets manager
- AWS, Azure, Google Cloud Platform
- Kubernetes and container security platforms
- Terraform, CI/CD, DevSecOps tooling
ResponsibilitiesOperational Responsibilities- Conduct Agentic AI IAM requirement analyses, architecture reviews, and security gap assessments across enterprise applications, cloud platforms, AI services, and infrastructure environments.
- Develop automation for access management and secrets lifecycle operations.
- Develop and implement security controls for AI agents, machine identities, APIs, workloads, and autonomous workflows.
- Monitor and remediate IAM and secrets-related risks.
- Build dashboards, reporting, and operational metrics.
IAM and Access Governance- Lead enterprise Agentic AI IAM program execution across multiple workstreams.
- Establish program milestones, sprint objectives, and delivery timelines.
- Track program risks, issues, blockers, and remediation activities.
- Ensure successful onboarding of applications, platforms, and cloud services into IAM controls.
- Drive operationalization and transition to support teams.
Agentic and Machine Identity Security- Establish security controls for AI agents, autonomous workflows, bots, and machine identities.
- Define policy-based authorization models for AI-driven systems.
- Secure API, workload, and machine-to-machine authentication.
- Monitor AI agent activities and machine identity risks.
Cloud and Hybrid Security- Secure IAM controls across AWS, Azure, GCP, Kubernetes, and on-prem environments.
- Standardize identity governance across multi-cloud ecosystems.
- Implement workload identity federation and cloud-native security controls.
Security Operations and Compliance- Monitor identity threats, privilege misuse, and secrets exposure.
- Support incident response and remediation activities.
- Ensure compliance with enterprise security standards and regulatory frameworks.
- Produce audit evidence and governance reporting.
Qualifications- Bachelor's degree in Cyber security, Computer Science, Information Technology, or related discipline.
- 5+ years of experience in IAM, cloud security, or cyber security engineering.
- Strong understanding of AI agent security, machine identities, and secure automation.
- Experience managing hybrid cloud IAM and secrets management programs.
- Relevant certifications preferred:
Employment eligibility to work with American Express in the United States is required as the company will not pursue visa sponsorship for these positions. 
