CyberArk PAM Engineer - Privileged Access Expert

American Express Global Business Travel; Boise (ID); On-site; USD 104,000 - 194,000; Full time

Benefits offered by this job

Flexible benefits

Travel perks

Skill development opportunities

Inclusion initiatives

Job summary

American Express Global Business Travel is seeking a seasoned Privileged Access Manager to oversee CyberArk Privilege Cloud across enterprise environments. The role requires deep PAM expertise, scripting skills, and the ability to coordinate with multiple teams to secure privileged access.

The position involves onboarding accounts and ongoing governance, with a focus on maintaining security, compliance, and operational resilience for critical systems and secrets.

Qualifications

• 8+ years hands-on experience with CyberArk Privilege Cloud in enterprise environments.
• University degree in Business, IT, or equivalent certifications (CyberArk CDE, Guardian, Defender).
• Proven ability to prioritize and execute tasks in high-pressure, collaborative settings.

Responsibilities

• Manage privileged accounts and secrets in PAM solution ensuring security/compliance.
• Support access rotation, auditing, logging, and incident resolution for privileged sessions.
• Conduct access reviews, audits, and compliance reporting for privileged accounts and policies.
• Identify security risks and propose actionable mitigation plans.
• Lead onboarding of accounts, servers, apps, and secrets to Privilege Cloud using CyberArk connectors.
• Perform root cause analysis and drive mitigation actions with internal teams/vendors.
• Create and maintain PAM documentation; train teams on use cases and SOPs.

Skills

CyberArk Privilege Cloud

PowerShell scripting

Python scripting

Cloud environments

SIEM/Monitoring tools

Education

Bachelor’s degree in IT/Business or equivalent certs

CyberArk CDE/Guardian/Defender certs

Tools

CyberArk

AWS

Azure

Job description

American Express Global Business Travel is seeking a seasoned Privileged Access Manager to oversee CyberArk Privilege Cloud across enterprise environments. The role requires deep PAM expertise, scripting skills, and the ability to coordinate with multiple teams to secure privileged access.

The position involves onboarding accounts and ongoing governance, with a focus on maintaining security, compliance, and operational resilience for critical systems and secrets.