Senior PAM Engineer: CyberArk & Cloud Security Lead

American Express Global Business Travel; Columbus (OH); On-site; USD 104,000 - 194,000; Full time

Job summary

Amex GBT is seeking a seasoned PAM lead to manage CyberArk Privilege Cloud across enterprise environments in the US. You will secure privileged accounts and automate access controls, while guiding incident response and audits. The role requires strong English communication, 8+ years with CyberArk, and cloud/SIEM experience.

Join a global security team focused on risk reduction, process improvement, and training to ensure compliant, scalable PAM operations.

Qualifications

• 8+ years of hands-on experience managing CyberArk Privilege Cloud in enterprise environments.
• University degree in Business, Information Technology, or equivalent CyberArk certifications (CyberArk CDE, Guardian, Defender).
• Strong English communication and collaboration skills.
• Experience with PowerShell or Python scripting, cloud environments (AWS, Azure), and SIEM tools.
• Ability to work under pressure and prioritize tasks.

Responsibilities

• Manage privileged accounts and secrets within PAM, ensuring security and compliance.
• Support access rotation, auditing, logging, and incident resolution for privileged sessions.
• Conduct access reviews, audit assessments, and policy compliance reporting.
• Identify risks and develop remediation recommendations.
• Lead onboarding of accounts, servers, apps, and secrets to Privilege Cloud using CyberArk connectors.
• Perform root cause analysis and coordinate with teams and vendors.
• Create and maintain PAM documentation; train on best practices and SOPs.

Skills

CyberArk Privilege Cloud

PowerShell

Python

Cloud (AWS/Azure)

SIEM

Education

Degree or CyberArk certifications

Tools

CyberArk

CyberArk Secrets Hub

Conjur

PAM tooling

Job description

Amex GBT is seeking a seasoned PAM lead to manage CyberArk Privilege Cloud across enterprise environments in the US. You will secure privileged accounts and automate access controls, while guiding incident response and audits. The role requires strong English communication, 8+ years with CyberArk, and cloud/SIEM experience.

Join a global security team focused on risk reduction, process improvement, and training to ensure compliant, scalable PAM operations.