Senior CyberArk PAM Engineer — Cloud & Privileged Access

American Express Global Business Travel; Phoenix (AZ); On-site; USD 104,000 - 194,000; Full time

Benefits offered by this job

Flexible benefits

Travel perks

Learning platform access

Diversity & Inclusion initiatives

Job summary

American Express Global Business Travel is seeking an experienced cybersecurity professional to manage privileged accounts and secrets within our Privileged Access Management (PAM) solution. You will support access rotation, auditing, and incident resolution, while conducting reviews and compliance reporting for privileged accounts.

The role requires 8+ years with CyberArk Privilege Cloud in enterprise settings, scripting skills (PowerShell/Python), and cloud familiarity (AWS/Azure).

Qualifications

• 8+ years of hands-on experience managing CyberArk Privilege Cloud in enterprise environments.
• University degree in Business, Information Technology, or equivalent certifications (CyberArk CDE, Guardian, Trustee/Defender, etc.).
• Experience with scripting (PowerShell or Python) and cloud environments (AWS, Azure).

Responsibilities

• Manage privileged accounts and secrets within our PAM solution.
• Support access rotation, auditing, logging, and incident resolution.
• Conduct access reviews, audits, and compliance reporting for privileged accounts and secrets.
• Identify security risks and develop actionable mitigations.
• Lead onboarding of accounts, servers, apps, and secrets to Privilege Cloud using CyberArk connectors.
• Perform root cause analysis and drive mitigation actions with internal teams and vendors.
• Create and maintain PAM documentation; train on use cases and SOPs.

Skills

CyberArk Privilege Cloud

PowerShell

Python

AWS

Azure

SIEM

English fluency

Education

CyberArk CDE

Guardian/Defender

Tools

CyberArk Connectors

CyberArk Secrets Hub

Conjur

Job description

American Express Global Business Travel is seeking an experienced cybersecurity professional to manage privileged accounts and secrets within our Privileged Access Management (PAM) solution. You will support access rotation, auditing, and incident resolution, while conducting reviews and compliance reporting for privileged accounts.

The role requires 8+ years with CyberArk Privilege Cloud in enterprise settings, scripting skills (PowerShell/Python), and cloud familiarity (AWS/Azure).