Senior Technical Product Manager - Agentic Identity

American Express•New York, NY

About The Position

The Senior Technical Product Manager will build and evolve consumer-facing platform capabilities that enable secure agentic experiences for American Express Card Members across AI platforms, partner channels, and personal agents. The role focuses on identity, authorization, consent, and agent identity, helping customers understand and control access while enabling developers to build on reusable capabilities. The position owns the roadmap for customer access and consent within the MCP platform, including capabilities for granting, managing, expiring, and revoking access as new experiences launch. The product manager leads capabilities from problem framing and requirements through launch, measurement, adoption, and iteration, and works closely with engineering, architecture, identity, security, privacy, risk, legal, compliance, analytics, and product partners. The role also defines reusable access and consent patterns, sets success measures, monitors performance and customer experience, manages dependencies and release planning, and communicates decisions, risks, and tradeoffs. It requires operating across strategy and technical detail, including customer journeys, APIs, OAuth and authorization flows, agent identity, platform dependencies, and launch readiness.

Requirements

6-8+ years of experience in product management, product development, software engineering, platform products, APIs, developer tools, identity products, AI products, or partner-enabled digital experiences.
Experience delivering identity, delegated access, authorization, consent, account linking, or secure API integrations, and translating customer and technical needs into product requirements.
Strong product-management experience moving platform, API, integration, identity, or infrastructure capabilities from alignment through launch, measurement, adoption, and iteration.
Comfort discussing APIs, OAuth and authorization flows, agent identity, schemas, technical tradeoffs, and platform architecture with engineers and architects.
Experience working with engineering, architecture, security, legal, compliance, privacy, risk, or data-governance stakeholders to launch customer-facing or partner-facing capabilities.
Ability to balance customer, business, partner, technical, and regulatory needs; assess tradeoffs and risks; gain buy-in; and make evidence-based decisions.
Strong cross-functional leadership, relationship-building, and communication skills in a complex, regulated environment.
Customer-focused judgment and the ability to balance usability, security, reliability, reuse, and delivery speed.
Employment eligibility to work with American Express in the United States is required; the company will not pursue visa sponsorship for these positions.

Nice To Haves

Experience working with large language models, AI agents, Model Context Protocol, function calling, tool orchestration, or AI platform products.
Experience building or managing APIs, SDKs, developer platforms, partner integrations, ecosystem products, or platform capabilities used by multiple internal or external consumers.
Familiarity with OAuth, OpenID Connect (OIDC), or related identity standards.
Depth in at least one adjacent area such as AI evaluations, observability, developer tooling, platform analytics, developer experience, or data governance.
Experience creating reusable product patterns used by multiple teams, products, or external partners.
Experience with responsible AI, model or tool evaluation, data minimization, consent, transparency, or customer data protection.
Experience in financial services, payments, fintech, or other highly regulated industries.
Bachelor’s degree or equivalent experience.

Responsibilities

Own the product roadmap and delivery for customer access, consent, authorization, and agent identity, from problem framing and requirements through launch, measurement, adoption, and iteration.
Partner with engineering, Enterprise Identity, security, privacy, risk, and product teams to define and deliver secure customer account-connection patterns.
Define product requirements for authentication, delegated access, authorization, permissions, consent capture, requests for additional access, customer understanding and control, agent identity, and revocation.
Define when capability or permission changes require additional customer consent, while preserving existing access when current permissions remain sufficient.
Ensure permissions are understandable to customers and technically enforceable as tools, partner models, and agent capabilities evolve.
Define reusable patterns for customer access, authorization, and consent, and work with engineering and domain teams to adopt them.
Translate customer, policy, and technical constraints into prioritized requirements, user stories, acceptance criteria, and delivery plans with engineering and architecture.
Distinguish which capabilities should be standardized across use cases and partners and which should remain domain- or partner-specific.
Define success measures for owned access and consent capabilities, including customer completion, friction, authorization success, permission enforcement, and traceability of agent actions.
Partner with engineering and Analytics to monitor performance and define evaluations and monitoring for effectiveness, reliability, and customer experience.
Use performance and customer-experience signals to prioritize improvements to owned capabilities.
Support development and release planning, manage cross-functional dependencies, and communicate decisions, risks, and tradeoffs to stakeholders.
Work closely with engineering and architecture while remaining accountable for customer outcomes, product priorities, tradeoffs, dependencies, and stakeholder alignment.
Collaborate with Product Strategy & Integrations, Product Operations, domain product teams, Enterprise Identity, Legal, Compliance, Privacy, Risk, Information Security, and data-governance partners.
Work across strategy and detail, including customer journeys, APIs, OAuth and authorization flows, agent identity, platform dependencies, and launch readiness.
Use real delivery work to surface reusable access, authorization, and consent needs rather than designing capabilities in isolation.