Remote Privileged Access Engineer — CyberArk PAM

American Express Global Business Travel; United States; Remote; USD 150,000 - 190,000; Full time

Job summary

American Express Global Business Travel seeks an experienced Privileged Access Management professional to manage CyberArk Privilege Cloud, rotate and audit privileged accounts, and respond to incidents in a fast-paced environment. The role emphasizes governance, risk mitigation, and automation across cloud platforms.

Ideal candidates have 8+ years in CyberArk Privilege Cloud, a business/IT degree, scripting skills in PowerShell or Python, and familiarity with AWS/Azure, Secrets Hub, Conjur, and

Qualifications

• 8+ years of experience in CyberArk Privilege Cloud.
• University degree in Business, Information Technology, or equivalent with relevant certifications (e.g., CyberArk CDE/Guardian/Defender).
• Experience scripting with PowerShell or Python for data extraction and PAM configurations.
• Experience managing CyberArk via Secrets Hub or Conjur and integrating cloud environments (AWS, Azure).
• Familiarity with logging/monitoring/SIEM tools and incident response processes.

Responsibilities

• Manage privileged accounts/secrets in Privileged Access Management (PAM) solution.
• Support access rotation, auditing, and logging of privileged sessions.
• Conduct access reviews, audit and compliance reporting for privileged accounts/secrets and access policies.
• Identify risks and issues and develop recommendations to address significant risks.
• Onboard accounts, servers, applications and secrets to Privilege Cloud using CyberArk connectors.
• Participate in and resolve incidents related to access, configurations and artifacts for PAM.
• Perform root cause analysis and drive mitigation actions, including vendor collaboration.
• Create and maintain documentation and train users on PAM use cases, best practices, SOPs.

Job description

American Express Global Business Travel seeks an experienced Privileged Access Management professional to manage CyberArk Privilege Cloud, rotate and audit privileged accounts, and respond to incidents in a fast-paced environment. The role emphasizes governance, risk mitigation, and automation across cloud platforms.

Ideal candidates have 8+ years in CyberArk Privilege Cloud, a business/IT degree, scripting skills in PowerShell or Python, and familiarity with AWS/Azure, Secrets Hub, Conjur, and