Senior CyberArk PAM Engineer - Privileged Access

American Express Global Business Travel; Santa Fe (NM); On-site; USD 104,000 - 194,000; Full time

Job summary

American Express Global Business Travel is seeking an experienced security professional to manage privileged access within CyberArk Privilege Cloud for enterprise environments. You will support rotation, auditing, and incident resolution, while conducting reviews and compliance reporting to mitigate significant risks.

Ideal candidates have 8+ years with CyberArk Privilege Cloud, strong English communication, and hands-on scripting in PowerShell or Python, plus cloud exposure (AWS/Azure).

Qualifications

• 8+ years hands-on with CyberArk Privilege Cloud in enterprises.
• University degree in Business or IT, or equivalent CyberArk certs.
• Ability to prioritize and execute under pressure in teams.
• Strong communication and collaboration skills in English.
• Scripting and cloud experience (PowerShell, Python; AWS/Azure).

Responsibilities

• Manage privileged accounts and secrets in PAM solution per standards.
• Support access rotation, auditing, logging, and incident handling.
• Conduct reviews, audits, and compliance reporting for privileged access.
• Identify risks and propose actionable mitigations.
• Lead onboarding of accounts, servers, apps to Privilege Cloud via CyberArk.
• Perform root cause analysis and drive mitigation with teams/vendors.
• Create documentation and train on PAM use cases and SOPs.

Skills

Fluent English

Strong interpersonal abilities

Prioritization under pressure

Autonomy with minimal supervision

Global scheduling flexibility

Education

Bachelors or equivalent in Business/IT

CyberArk CDE/Guardian/Defender certs

Tools

CyberArk Privilege Cloud

PowerShell

Python

AWS

Azure

SIEM

CyberArk Secrets Hub/Conjur

Job description

American Express Global Business Travel is seeking an experienced security professional to manage privileged access within CyberArk Privilege Cloud for enterprise environments. You will support rotation, auditing, and incident resolution, while conducting reviews and compliance reporting to mitigate significant risks.

Ideal candidates have 8+ years with CyberArk Privilege Cloud, strong English communication, and hands-on scripting in PowerShell or Python, plus cloud exposure (AWS/Azure).