CyberArk PAM Engineer — Privileged Access Specialist

American Express Global Business Travel; Montpelier (VT); On-site; USD 104,000 - 194,000; Full time

Job summary

American Express Global Business Travel is seeking a skilled Privileged Access Management Engineer to manage CyberArk Privilege Cloud in enterprise environments. The role focuses on securing privileged accounts and secrets, with responsibilities for access reviews, audits, and policy enforcement.

Applicants should have 8+ years of hands-on CyberArk Privilege Cloud experience, strong scripting skills (PowerShell/Python), and cloud knowledge (AWS/Azure).

Qualifications

• University degree in Business or IT, or equivalent CyberArk-related certifications.
• Experience in enterprise Privileged Access Management environments.
• Proven ability to manage privileged accounts, secrets and access policies.
• Excellent written and verbal communication in English.

Responsibilities

• Manage CyberArk Privilege Cloud in enterprise environments and ensure security and compliance.
• Support access rotation, auditing, logging, and incident resolution for privileged sessions.
• Conduct access reviews, audits, and compliance reporting for privileged accounts, secrets, and policies.
• Lead onboarding of accounts, servers, apps, and secrets via CyberArk connectors.
• Perform root cause analysis and drive mitigation actions with internal teams and vendors.
• Create and maintain PAM documentation and conduct training on SOPs for PAM usage.

Skills

Fluent English

Interpersonal skills

Communication

Prioritization under pressure

Autonomy

Education

University degree in Business/IT or equivalent

Tools

CyberArk Privilege Cloud

PowerShell

Python

AWS

Azure

SIEM Tools

CyberArk Secrets Hub/Conjur

Job description

American Express Global Business Travel is seeking a skilled Privileged Access Management Engineer to manage CyberArk Privilege Cloud in enterprise environments. The role focuses on securing privileged accounts and secrets, with responsibilities for access reviews, audits, and policy enforcement.

Applicants should have 8+ years of hands-on CyberArk Privilege Cloud experience, strong scripting skills (PowerShell/Python), and cloud knowledge (AWS/Azure).