Agentic AI Cybersecurity Engineer - Identity Access Lifecycle Managementgmt at American Express in Phoenix, AZ

Job description

Joining Amex Tech means discovering and shaping your contribution to something big. Here, you can work alongside talented tech teams and build a unique career with the Powerful Backing of American Express. With a range of opportunities to work with the latest technologies, and a commitment to back the broader engineering community through open source, our mission is to power your success. Because Amex Tech is powered by our technology, our culture, and our colleagues. The Technology organization enables and accelerates the company’s growth strategies, delivering global capabilities and services in support of Amex’s customers and colleagues, while maintaining 24/7 servicing and availability to ensure an uninterrupted, high-quality customer experience. Technology provides the foundation for everything we do in the company while driving differentiation through building and leveraging innovative technology and data insights. At American Express, our mission is to deliver the world’s best customer experience every day. At the heart of this mission is our Information Security organization, enabling exceptional experiences built on a foundation of trust, service, and security. We leverage advanced technologies and data-driven insights to stay ahead of an evolving threat landscape. We foster a culture of passion, curiosity, and courage—empowering you to innovate, grow, and help shape the future of a Fortune 100 company. Trust. Service. Security. We are seeking an experienced and results-oriented Cybersecurity Engineer to join the Identity Access and Lifecycle Management team. This role will help ensure first-line defense cybersecurity operational goals are met by partnering with cross-functional teams, engineering automation, and building AI-enabled agents that can support self-auditing of controls. The ideal candidate will bring a strong foundation in control management, data-driven control testing, automation engineering, stakeholder engagement, and AI-enabled solution design and delivery—sitting at the intersection of risk, controls, software engineering, and process automation in a fast-paced, matrixed environment. Engineering, Agent Development & Automated Metrics Design, build, and enhance automated metrics that strengthen control effectiveness and enable continuous control monitoring. Develop, configure, test, and maintain AI-enabled agents and automation workflows that can evaluate control evidence, identify exceptions, surface control gaps, recommend remediation actions, and support scalable self-auditing capabilities. Partner with data, engineering, and technology teams to source, validate, and transform data used in automated control testing and agent-driven analysis. Define and track KPIs/KRIs such as control performance trends, exception volumes, agent findings, remediation timeliness, and self-audit coverage. Data Engineering, Insights & Reporting Analyze control testing outputs, cybersecurity telemetry, and agent-generated findings to identify trends, anomalies, emerging risks, and opportunities for control improvement. Engineer dashboards, reports, and data products that provide clear visibility into control health, self-audit results, exception patterns, and operational risk posture. Translate technical findings into concise, risk-informed insights and recommendations for control owners, engineering partners, and leadership stakeholders. Continuous Improvement, Control Automation & Agentic AI Identify opportunities to enhance documentation quality, data integrity, and control standardization in accordance with the RCSA framework. Support the enhancement of metrics frameworks, automated testing logic, and reporting capabilities to increase repeatability and reduce manual effort. Partner with engineering and tooling teams to scale automated testing, monitoring, and agent-enabled self-audit solutions across controls. Contribute to automation and efficiency initiatives related to control documentation review, monitoring,