Senior CyberArk PAM Engineer

American Express Global Business Travel

Trenton (NJ)

On-site

USD 104,000 - 194,000

Full time

14 days+

A complete application in a minute

Tailored resume and cover letter, ready to send.

Get past ATS filters

Benefits offered by this job

Flexible benefits

Travel perks

Learning platform access

Job summary

American Express Global Business Travel is seeking a seasoned Privileged Access Management (PAM) specialist to manage CyberArk Privilege Cloud in a global enterprise environment. You will lead credential vaulting, access reviews, and incident resolution while collaborating with security and IT teams.

Qualifications include 8+ years with CyberArk Privilege Cloud, strong scripting (PowerShell, Python), and experience with AWS/Azure and SIEM tools.

Qualifications

Fluent English with strong interpersonal and consultative abilities; excellent written and verbal communication.
8+ years of hands-on experience managing CyberArk Privilege Cloud in enterprise environments.
University degree in Business, Information Technology, or equivalent certifications (CyberArk CDE, Guardian, Trustee/Defender, etc.).
Proven ability to prioritize and execute tasks effectively in high-pressure environments while working collaboratively in team settings.
Self-motivated professional who performs duties with minimal supervision, exercising sound judgment and autonomy within role scope.
Flexibility with scheduling to support global operations and business needs.
Experience with PowerShell or Python scripting, cloud environments (AWS, Azure), and SIEM/monitoring tools; familiarity with CyberArk Secrets Hub or Conjur is preferred.

Responsibilities

Manage privileged accounts and secrets within our Privileged Access Management (PAM) solution, ensuring security and compliance standards are maintained.
Support operational processes for access rotation, auditing, logging, and incident resolution related to privileged sessions and service requests.
Conduct access reviews, audit assessments, and compliance reporting for privileged accounts, secrets, and access policies.
Identify security risks and operational issues, developing actionable recommendations to mitigate significant risks and resolve complex challenges.
Lead onboarding of accounts, servers, applications, and secrets to Privilege Cloud using CyberArk connectors and plugins.
Execute root cause analysis on issues and drive mitigation actions, collaborating with internal teams and vendors as needed.
Create and maintain documentation; conduct training sessions on use cases, best practices, and standard operating procedures for Privileged Access Management.