Senior PAM Engineer – CyberArk Cloud & Privilege Security

American Express Global Business Travel; Salem (OR); On-site; USD 104,000 - 194,000; Full time

Benefits offered by this job

Flexible benefits

Travel perks

Learning platform access

Inclusive culture

Job summary

American Express Global Business Travel is seeking an experienced IAM professional to manage CyberArk Privilege Cloud in enterprise environments. You will oversee privileged accounts, secrets, and access policies, and lead onboarding of assets to Privilege Cloud using CyberArk connectors.

The role requires 8+ years of hands-on experience, scripting in PowerShell or Python, and familiarity with AWS/Azure and SIEM tools.

Qualifications

• 8+ years of hands-on experience managing CyberArk Privilege Cloud in enterprise environments.
• University degree in Business, Information Technology, or equivalent certifications (CyberArk CDE, Guardian, Trustee/Defender, etc.).
• Proven ability to prioritize and execute tasks effectively in high-pressure environments while working collaboratively in team settings.

Responsibilities

• Manage privileged accounts and secrets within our Privileged Access Management (PAM) solution, ensuring security and compliance standards are maintained.
• Support operational processes for access rotation, auditing, logging, and incident resolution related to privileged sessions and service requests.
• Conduct access reviews, audit assessments, and compliance reporting for privileged accounts, secrets, and access policies.

Skills

CyberArk Privilege Cloud

PowerShell

Python scripting

Cloud environments (AWS, Azure)

SIEM/monitoring

Education

CyberArk CDE certification

Guardian

Trustee/Defender

Tools

CyberArk Secrets Hub

Conjur

Job description

American Express Global Business Travel is seeking an experienced IAM professional to manage CyberArk Privilege Cloud in enterprise environments. You will oversee privileged accounts, secrets, and access policies, and lead onboarding of assets to Privilege Cloud using CyberArk connectors.

The role requires 8+ years of hands-on experience, scripting in PowerShell or Python, and familiarity with AWS/Azure and SIEM tools.