Senior CyberArk PAM Engineer

American Express Global Business Travel; Northern (KY); Hybrid; USD 104,000 - 194,000; Full time

Benefits offered by this job

Benefits package

Travel perks

Learning & development

Job summary

American Express Global Business Travel seeks a PAM Engineer to manage privileged accounts and secrets, supporting rotation, auditing, and incident resolution within Privilege Cloud. You will lead onboarding of accounts and services, perform root cause analyses, and drive mitigations with internal teams and vendors.

The role requires 8+ years of CyberArk Privilege Cloud experience, strong English, and a mix of scripting, cloud, and SIEM skills.

Qualifications

• 8+ years of hands-on experience managing CyberArk Privilege Cloud in enterprise environments.
• Fluent English with strong interpersonal and consultative abilities; excellent written and verbal communication.
• University degree in Business, Information Technology, or equivalent certifications (CyberArk CDE, Guardian, Trustee/Defender, etc.).
• Proven ability to prioritize and execute tasks effectively in high-pressure environments while working collaboratively in team settings.
• Self-motivated professional who performs duties with minimal supervision, exercising sound judgment and autonomy within role scope.
• Flexibility with scheduling to support global operations and business needs.
• Experience with PowerShell or Python scripting, cloud environments (AWS, Azure), and SIEM/monitoring tools; familiarity with CyberArk Secrets Hub or Conjur is preferred.

Responsibilities

• Manage privileged accounts and secrets within our Privileged Access Management (PAM) solution, ensuring security and compliance standards are maintained.
• Support operational processes for access rotation, auditing, logging, and incident resolution related to privileged sessions and service requests.
• Conduct access reviews, audit assessments, and compliance reporting for privileged accounts, secrets, and access policies.
• Identify security risks and operational issues, developing actionable recommendations to mitigate significant risks and resolve complex challenges.
• Lead onboarding of accounts, servers, applications, and secrets to Privilege Cloud using CyberArk connectors and plugins.
• Execute root cause analysis on issues and drive mitigation actions, collaborating with internal teams and vendors as needed.
• Create and maintain documentation; conduct training sessions on use cases, best practices, and standard operating procedures for Privileged Access Management.

Skills

CyberArk Privilege Cloud

PowerShell/Python scripting

Cloud environments AWS/Azure

SIEM/monitoring tools

Strong communication

Education

University degree in Business or Information Technology or equivalent certifications (CyberArk CDE, Guardian, Trustee/Defender)

Tools

CyberArk Secrets Hub

Conjur

Job description

American Express Global Business Travel seeks a PAM Engineer to manage privileged accounts and secrets, supporting rotation, auditing, and incident resolution within Privilege Cloud. You will lead onboarding of accounts and services, perform root cause analyses, and drive mitigations with internal teams and vendors.

The role requires 8+ years of CyberArk Privilege Cloud experience, strong English, and a mix of scripting, cloud, and SIEM skills.