Senior CyberArk PAM Engineer - Privileged Access Expert

American Express Global Business Travel; Helena (MT); On-site; USD 104,000 - 194,000; Full time

Job summary

American Express Global Business Travel is seeking an experienced Privileged Access Management specialist to manage CyberArk Privilege Cloud in a large enterprise setting. You will support access rotation, auditing, and incident resolution while maintaining security standards.

Responsibilities include conducting reviews, identifying risks, and onboarding accounts and secrets to Privilege Cloud. Strong English, collaboration skills, and cloud experience are required.

Qualifications

• 8+ years hands-on in CyberArk Privilege Cloud in enterprise environments.
• University degree in Business, IT or equivalent certifications.
• Fluent English with strong written and verbal communication.

Responsibilities

• Manage privileged accounts and secrets while ensuring security and compliance.
• Support access rotation, auditing, logging, and incident resolution for privileged sessions.
• Conduct access reviews, audits, and compliance reporting for privileged assets.
• Identify risks and propose mitigations for complex security challenges.
• Lead onboarding of accounts, servers, apps, and secrets to Privilege Cloud using CyberArk connectors.

Skills

Communication

Consultative skills

Task prioritization

Team collaboration

Education

Bachelor's degree in Business or Information Technology

CyberArk CDE / Guardian / Defender certifications

Tools

CyberArk Privilege Cloud

PowerShell

Python

AWS

Azure

SIEM tools

Job description

American Express Global Business Travel is seeking an experienced Privileged Access Management specialist to manage CyberArk Privilege Cloud in a large enterprise setting. You will support access rotation, auditing, and incident resolution while maintaining security standards.

Responsibilities include conducting reviews, identifying risks, and onboarding accounts and secrets to Privilege Cloud. Strong English, collaboration skills, and cloud experience are required.