Senior PAM Engineer (CyberArk Privilege Cloud)

American Express Global Business Travel; City of Albany (NY); On-site; USD 103,000 - 194,000; Full time

Benefits offered by this job

Discretionary annual bonus

Flexible benefits

Job summary

American Express Global Business Travel seeks an experienced PAM professional to manage CyberArk Privilege Cloud, safeguarding privileged accounts across enterprise systems.

You will lead access reviews, incident response, and collaboration with security teams to implement best practices. A university degree and 8+ years in privileged access management are preferred; discretionary bonus eligibility applies.

Qualifications

• 8+ years of hands-on experience managing CyberArk Privilege Cloud in enterprise environments.
• University degree in Business, Information Technology, or equivalent certifications.
• Experience with scripting (PowerShell or Python) and cloud environments (AWS, Azure).

Responsibilities

• Manage privileged accounts and secrets within our Privileged Access Management (PAM) solution while maintaining security and compliance.
• Support access rotation, auditing, logging, and incident resolution for privileged sessions and service requests.
• Conduct access reviews, audit assessments, and compliance reporting for privileged accounts and policies.
• Identify security risks and operational issues and develop actionable mitigations.
• Lead onboarding of accounts, servers, apps, and secrets to Privilege Cloud using CyberArk connectors.
• Perform root-cause analysis and drive mitigation actions with internal teams and vendors.
• Create and maintain documentation; train users on PAM use cases and SOPs.

Skills

CyberArk Privilege Cloud

PowerShell

Python scripting

AWS

Azure

SIEM/monitoring tools

CyberArk Secrets Hub

Conjur

Education

University degree in Business or IT

CyberArk certifications (CDE/Guardian/Defender)

Tools

CyberArk Privilege Cloud

Job description

American Express Global Business Travel seeks an experienced PAM professional to manage CyberArk Privilege Cloud, safeguarding privileged accounts across enterprise systems.

You will lead access reviews, incident response, and collaboration with security teams to implement best practices. A university degree and 8+ years in privileged access management are preferred; discretionary bonus eligibility applies.