Senior PAM Engineer — CyberArk Expert

American Express Global Business Travel; Dover (DE); On-site; USD 104,000 - 194,000; Full time

Job summary

American Express Global Business Travel seeks a seasoned PAM expert to manage CyberArk Privilege Cloud, govern privileged accounts and secrets, and drive security improvements across the enterprise.

You will perform access reviews, incident response support, and governance reporting while collaborating with global teams. Strong scripting and cloud skills are required for automation and optimization.

Qualifications

• 8+ years hands-on experience with CyberArk Privilege Cloud in enterprise environments.
• University degree or certifications in security/privacy/compliance.

Responsibilities

• Manage privileged accounts and secrets within the PAM solution, ensuring security and compliance.
• Support access rotation, auditing, logging, and incident resolution for privileged sessions.
• Conduct access reviews, audit assessments, and compliance reporting for privileged accounts and policies.
• Identify security risks and develop actionable recommendations to mitigate significant risks and resolve complex challenges.
• Lead onboarding of accounts, servers, applications, and secrets to Privilege Cloud using CyberArk connectors and plugins.
• Execute root cause analysis on issues and drive mitigation actions with internal teams and vendors.
• Create and maintain documentation; conduct training on PAM use cases, best practices, and SOPs.

Skills

CyberArk Privilege Cloud

PowerShell

Python scripting

AWS/Azure

SIEM monitoring

Access reviews & compliance

English communication

Education

University degree in Business/IT or related field (CyberArk CDE/Guardian/Defender)

Tools

CyberArk connectors

CyberArk Secrets Hub

Conjur

Job description

American Express Global Business Travel seeks a seasoned PAM expert to manage CyberArk Privilege Cloud, govern privileged accounts and secrets, and drive security improvements across the enterprise.

You will perform access reviews, incident response support, and governance reporting while collaborating with global teams. Strong scripting and cloud skills are required for automation and optimization.