CyberArk PAM Engineer - Privileged Access Specialist

American Express Global Business Travel; Saint Paul (MN); On-site; USD 104,000 - 194,000; Full time

Benefits offered by this job

Flexible benefits

Travel perks

Learning and development programs

Diversity and Inclusion initiatives

Job summary

American Express Global Business Travel is seeking a senior Privileged Access Management specialist in the United States to manage CyberArk Privilege Cloud and oversee privileged account controls. You will enhance security postures, conduct audits, and drive incident resolution for critical systems.

The role requires 8+ years of hands-on experience, a relevant degree, and strong scripting ability (PowerShell, Python) with cloud familiarity across AWS/Azure.

Qualifications

• 8+ years of hands-on experience managing CyberArk Privilege Cloud in enterprise environments.
• University degree in Business, Information Technology, or equivalent certifications.
• Fluent English with strong communication and collaboration skills.

Responsibilities

• Manage privileged accounts and secrets within PAM, ensuring security and compliance.
• Support access rotation, auditing, logging, and incident resolution for privileged sessions.
• Conduct access reviews, audit assessments, and compliance reporting.
• Identify security risks and develop actionable mitigation recommendations.
• Lead onboarding of accounts, servers, apps, and secrets to Privilege Cloud with CyberArk connectors.
• Perform root cause analysis and drive mitigation actions with internal teams and vendors.
• Create and maintain documentation; train on use cases and SOPs for PAM.

Skills

CyberArk Privilege Cloud

PowerShell

Python

AWS

Azure

SIEM

Education

University degree in Business or Information Technology

CyberArk CDE / Guardian / Defender certifications

Tools

CyberArk Privilege Cloud

Job description

American Express Global Business Travel is seeking a senior Privileged Access Management specialist in the United States to manage CyberArk Privilege Cloud and oversee privileged account controls. You will enhance security postures, conduct audits, and drive incident resolution for critical systems.

The role requires 8+ years of hands-on experience, a relevant degree, and strong scripting ability (PowerShell, Python) with cloud familiarity across AWS/Azure.