Lead PAM Engineer: CyberArk, Cloud & Compliance

American Express Global Business Travel; Raleigh (NC); On-site; USD 104,000 - 194,000; Full time

Benefits offered by this job

Flexible benefits

Training & development opportunities

Inclusion & diversity programs

Travel perks

Job summary

Amex GBT in the United States seeks a seasoned PAM professional to manage privileged accounts and secrets, ensuring security and compliance across the environment.

You will lead onboarding to Privilege Cloud using CyberArk connectors, perform access reviews and audits, implement remediation actions, and create documentation and training on PAM best practices.

This role requires 8+ years of CyberArk experience, strong scripting skills, and the ability to collaborate across global teams.

Qualifications

• 8+ years of hands-on experience managing CyberArk Privilege Cloud in enterprise environments.
• University degree in Business, Information Technology, or equivalent certifications (CyberArk CDE, Guardian, Trustee/Defender).
• Experience with PowerShell or Python scripting; cloud environments (AWS, Azure); SIEM/monitoring tools.

Responsibilities

• Manage privileged accounts and secrets within our PAM solution, ensuring security and compliance standards are maintained.
• Support operational processes for access rotation, auditing, logging, and incident resolution related to privileged sessions and service requests.
• Conduct access reviews, audit assessments, and compliance reporting for privileged accounts, secrets, and access policies.
• Identify security risks and operational issues, developing actionable recommendations to mitigate significant risks and resolve complex challenges.
• Lead onboarding of accounts, servers, applications, and secrets to Privilege Cloud using CyberArk connectors and plugins.
• Execute root cause analysis on issues and drive mitigation actions, collaborating with internal teams and vendors as needed.
• Create and maintain documentation; conduct training sessions on use cases, best practices, and standard operating procedures for Privileged Access Management.

Skills

CyberArk Privilege Cloud

PowerShell

Python

Cloud (AWS/Azure)

SIEM

Security best practices

English communication

Education

Bachelor's degree in Business or IT

CyberArk certifications

Tools

CyberArk Secrets Hub

Conjur

Job description

Amex GBT in the United States seeks a seasoned PAM professional to manage privileged accounts and secrets, ensuring security and compliance across the environment.

You will lead onboarding to Privilege Cloud using CyberArk connectors, perform access reviews and audits, implement remediation actions, and create documentation and training on PAM best practices.

This role requires 8+ years of CyberArk experience, strong scripting skills, and the ability to collaborate across global teams.