Senior CyberArk PAM Engineer

American Express Global Business Travel; Indianapolis (IN); On-site; USD 104,000 - 194,000; Full time

Benefits offered by this job

Flexible benefits

Travel perks

Skills development

Job summary

Amex GBT is seeking an experienced security professional to manage privileged access across our enterprise environments. You will oversee privileged accounts and secrets using CyberArk Privilege Cloud, support rotation, auditing, and incident response, and lead onboarding of assets to Privilege Cloud with connectors and plugins.

The role requires extensive CyberArk experience, strong collaboration, and flexibility to support global operations.

Qualifications

• 8+ years hands‑on experience with CyberArk Privilege Cloud in enterprise environments.
• University degree in Business, Information Technology, or equivalent certifications (CyberArk CDE, Guardian, Trustee/Defender, etc.).
• Strong ability to prioritize and execute tasks in high‑pressure environments while collaborating in a team.

Responsibilities

• Manage privileged accounts and secrets within our PAM solution ensuring security and compliance.
• Support access rotation, auditing, logging, and incident resolution for privileged sessions and service requests.
• Conduct access reviews, audits, and compliance reporting for privileged accounts and policies.
• Lead onboarding of accounts, servers, apps, and secrets to Privilege Cloud using CyberArk connectors and plugins.
• Execute root cause analysis and drive mitigation actions with internal teams and vendors.

Skills

CyberArk Privilege Cloud

PowerShell / Python

Cloud (AWS / Azure)

SIEM / Monitoring

CyberArk Secrets Hub / Conjur

Education

Business / IT degree

CyberArk certifications

Tools

CyberArk Connectors

CyberArk Secrets Hub

Job description

Amex GBT is seeking an experienced security professional to manage privileged access across our enterprise environments. You will oversee privileged accounts and secrets using CyberArk Privilege Cloud, support rotation, auditing, and incident response, and lead onboarding of assets to Privilege Cloud with connectors and plugins.

The role requires extensive CyberArk experience, strong collaboration, and flexibility to support global operations.