Senior PAM Engineer – CyberArk & Cloud Security

American Express Global Business Travel; Harrisburg (Dauphin County); On-site; USD 104,000 - 194,000; Full time

Job summary

American Express Global Business Travel is seeking an experienced PAM engineer to manage CyberArk Privilege Cloud across enterprise environments. You will support access rotation, auditing, and incident resolution for privileged sessions, while leading onboarding of accounts and secrets to Privilege Cloud using connectors and plugins.

Ideal candidates have 8+ years in CyberArk Privilege Cloud, strong scripting skills (PowerShell, Python), and cloud experience (AWS/Azure).

Qualifications

• 8+ years of hands-on experience managing CyberArk Privilege Cloud in enterprise environments.
• University degree in Business, Information Technology, or equivalent certifications.
• CyberArk CDE/Guardian/Defender certifications preferred.
• Ability to prioritize and collaborate in high-pressure environments.

Responsibilities

• Manage privileged accounts and secrets within our PAM solution, ensuring security and compliance standards are maintained.
• Support access rotation, auditing, logging, and incident resolution for privileged sessions and service requests.
• Conduct access reviews, audit assessments, and compliance reporting for privileged accounts and policies.
• Identify security risks and operational issues; develop actionable mitigation recommendations.
• Lead onboarding of accounts/servers/apps/secrets to Privilege Cloud using CyberArk connectors and plugins.
• Perform root cause analysis and drive mitigation actions with internal teams and vendors.
• Create and maintain documentation; train on PAM use cases, best practices, and SOPs.

Skills

CyberArk Privilege Cloud

PAM

PowerShell

Python scripting

AWS/Azure cloud

SIEM/monitoring

Education

University degree in Business/IT

CyberArk certifications (CDE/Guardian/Defender)

Tools

CyberArk Privilege Cloud

CyberArk Connectors

Conjur

Job description

American Express Global Business Travel is seeking an experienced PAM engineer to manage CyberArk Privilege Cloud across enterprise environments. You will support access rotation, auditing, and incident resolution for privileged sessions, while leading onboarding of accounts and secrets to Privilege Cloud using connectors and plugins.

Ideal candidates have 8+ years in CyberArk Privilege Cloud, strong scripting skills (PowerShell, Python), and cloud experience (AWS/Azure).