PAM Engineer: CyberArk Specialist for Cloud Security

American Express Global Business Travel; Hartford (CT); On-site; USD 104,000 - 194,000; Full time

Job summary

American Express Global Business Travel seeks a seasoned Privileged Access Management specialist to secure CyberArk Privilege Cloud across our enterprise environment. You will manage privileged accounts, rotations, auditing, and incident resolution to uphold security and compliance.

The role requires 8+ years of CyberArk experience, strong scripting in PowerShell or Python, and cloud skills (AWS/Azure), with the ability to collaborate across global teams.

Qualifications

• 8+ years hands-on experience managing CyberArk Privilege Cloud in enterprise environments.
• Strong scripting skills in PowerShell or Python.
• Experience with cloud environments (AWS/Azure) and SIEM/monitoring tools.
• Fluent English with excellent communication and collaboration skills.

Responsibilities

• Manage privileged accounts and secrets within PAM solution, ensuring security and compliance.
• Support access rotation, auditing, logging, and incident resolution for privileged sessions.
• Conduct access reviews, audits, and compliance reporting for privileged accounts and policies.
• Lead onboarding of accounts to Privilege Cloud using CyberArk connectors and plugins.
• Create documentation and train on PAM use cases and SOPs.

Skills

CyberArk Privilege Cloud

PowerShell scripting

Python scripting

Cloud environments (AWS, Azure)

SIEM / monitoring tools

English communication

Education

University degree in Business/Information Technology

CyberArk CDE certification

Guardian/Trustee/Defender certifications

Tools

CyberArk Privilege Cloud

PowerShell

Python

AWS

Azure

SIEM tools

Job description

American Express Global Business Travel seeks a seasoned Privileged Access Management specialist to secure CyberArk Privilege Cloud across our enterprise environment. You will manage privileged accounts, rotations, auditing, and incident resolution to uphold security and compliance.

The role requires 8+ years of CyberArk experience, strong scripting in PowerShell or Python, and cloud skills (AWS/Azure), with the ability to collaborate across global teams.