AI Architect

This individual will serve as the Lead AI Security Architect responsible for defining the enterprise security strategy, reference architecture, and governance framework for Royal Caribbean's AI and Agentic AI ecosystem. They will establish architectural standards for how AI agents are provisioned, authenticated, authorized, monitored, and governed across customer-facing and internal platforms, treating every AI agent as a managed non-human identity with clear ownership, lifecycle controls, and security accountability. This person will lead the design and implementation of enterprise-grade security guardrails, authorization frameworks, workload identity architectures, and policy enforcement mechanisms that govern AI interactions with systems, applications, APIs, and sensitive data. They will partner closely with executive leadership, IAM, Product, Platform Engineering, Cloud Security, and AI/ML teams to define long-term security roadmaps, establish governance standards, conduct architectural reviews, and drive adoption of security best practices. The architect will act as the technical authority for securing autonomous and non-deterministic AI systems, ensuring scalable identity-driven security across web, API, cloud, and edge environments while enabling the safe deployment of agentic AI solutions throughout the organization. Their focus will be on balancing innovation, governance, and risk management as Royal Caribbean expands its AI capabilities at enterprise scale

We are a company committed to creating diverse and inclusive environments where people can bring their full, authentic selves to work every day. We are an equal opportunity/affirmative action employer that believes everyone matters. Qualified candidates will receive consideration for employment regardless of their race, color, ethnicity, religion, sex (including pregnancy), sexual orientation, gender identity and expression, marital status, national origin, ancestry, genetic factors, age, disability, protected veteran status, military or uniformed service member status, or any other status or characteristic protected by applicable laws, regulations, and ordinances. If you need assistance and/or a reasonable accommodation due to a disability during the application or recruiting process, please send a request to HR@insightglobal.com.To learn more about how we collect, keep, and process your private information, please review Insight Global's Workforce Privacy Policy: https://insightglobal.com/workforce-privacy-policy/.

12+ years of experience in Security Architecture, Application Security, Platform Security, or Enterprise Security Engineering, with demonstrated ownership of enterprise-wide security programs and strategies
Proven experience architecting and leading Enterprise IAM and Non-Human Identity (NHI) initiatives across complex, distributed environments
Extensive experience designing security frameworks for AI-enabled, autonomous, agentic, and automation-driven systems
Deep expertise in application, API, cloud, and platform security architecture
Experience defining and implementing enterprise-wide least-privilege access models, authorization standards, and governance frameworks for large-scale distributed systems
Expert knowledge of OAuth 2.0/2.1, OIDC, On-Behalf-Of (OBO) token exchange, token lifecycle management, and modern identity security architectures
Hands-on experience designing workload identity solutions leveraging SPIFFE/SPIRE, mTLS, PKI, certificate-based authentication, SSO implementations and provisioning, and Zero Trust principles
Experience defining enterprise security roadmaps, architecture standards, and governance models while influencing executive and technical stakeholders
Demonstrated ability to lead cross-functional initiatives spanning Security, IAM, Platform Engineering, AI/ML, Product, and Infrastructure teams

Benefit packages for this role will start on the 1st day of employment and include medical, dental, and vision insurance, as well as HSA, FSA, and DCFSA account options, and 401k retirement account access with employer matching. Employees in this role are also entitled to paid sick leave and/or other paid time off as provided by applicable law.