CyberArk PAM Engineer — Privileged Access Expert

American Express Global Business Travel; Augusta (ME); On-site; USD 104,000 - 194,000; Full time

Job summary

American Express Global Business Travel is seeking a PAM specialist to join our US-based team. You will manage privileged accounts and secrets, support rotation, auditing, logging, and incident response across enterprise environments.

Required: 8+ years with CyberArk Privilege Cloud, a relevant degree or CyberArk certifications, excellent English, and scripting skills (PowerShell or Python). This role supports global operations with bonus eligibility and a competitive base salary.

Qualifications

• 8+ years of hands-on experience managing CyberArk Privilege Cloud in enterprise environments.
• University degree in Business, Information Technology, or equivalent certifications (CyberArk CDE, Guardian, Trustee/Defender, etc.).
• Fluent English with strong interpersonal and consultative abilities.
• Ability to prioritize and execute tasks in high-pressure environments while collaborating in teams.
• Self-motivated and autonomous with sound judgment; flexible for global operations.
• Experience with PowerShell or Python scripting, cloud environments (AWS, Azure), and SIEM/monitoring tools; familiarity with CyberArk Secrets Hub or Conjur preferred.

Responsibilities

• Manage privileged accounts and secrets within PAM, ensuring security and compliance standards are maintained.
• Support access rotation, auditing, logging, and incident resolution related to privileged sessions and service requests.
• Conduct access reviews, audit assessments, and compliance reporting for privileged accounts, secrets, and access policies.
• Identify security risks and operational issues, developing actionable recommendations to mitigate significant risks and resolve complex challenges.
• Lead onboarding of accounts, servers, applications, and secrets to Privilege Cloud using CyberArk connectors and plugins.
• Execute root cause analysis on issues and drive mitigation actions, collaborating with internal teams and vendors as needed.
• Create and maintain documentation; conduct training sessions on use cases, best practices, and standard operating procedures for Privileged Access Management.

Skills

CyberArk Privilege Cloud

PowerShell

Python scripting

AWS

Azure

SIEM monitoring

Fluent English

Team collaboration

Education

University degree or CyberArk certification

CyberArk CDE

Guardian/Defender/Trustee certifications

Tools

CyberArk Privilege Cloud

CyberArk Secrets Hub

Conjur

CyberArk connectors/plugins

Job description

American Express Global Business Travel is seeking a PAM specialist to join our US-based team. You will manage privileged accounts and secrets, support rotation, auditing, logging, and incident response across enterprise environments.

Required: 8+ years with CyberArk Privilege Cloud, a relevant degree or CyberArk certifications, excellent English, and scripting skills (PowerShell or Python). This role supports global operations with bonus eligibility and a competitive base salary.