Senior PAM Engineer | CyberArk Privilege Cloud

American Express Global Business Travel; Jackson (MS); On-site; USD 104,000 - 194,000; Full time

Benefits offered by this job

Discretionary annual bonus

Comprehensive US benefits package

Travel perks and learning programs

Job summary

American Express Global Business Travel is seeking an experienced PAM specialist to manage privileged accounts and secrets within the CyberArk Privilege Cloud environment. You will support access rotation, auditing, and incident resolution while coordinating with internal teams and vendors to mitigate risks.

The role requires 8+ years of hands-on CyberArk Privilege Cloud experience and a relevant university degree or certifications.

Qualifications

• 8+ years hands-on experience managing CyberArk Privilege Cloud in enterprise environments.
• University degree in Business, Information Technology, or equivalent certifications.
• Strong ability to prioritize and execute tasks in high-pressure environments; team oriented.

Responsibilities

• Manage privileged accounts and secrets within PAM solution, ensuring security and compliance.
• Support access rotation, auditing, logging, and incident resolution for privileged sessions and service requests.
• Conduct access reviews, audits, and compliance reporting for privileged accounts, secrets, and policies.
• Identify security risks and provide actionable mitigations for significant risks.
• Lead onboarding of accounts, servers, apps, and secrets to Privilege Cloud using CyberArk connectors.
• Perform root cause analysis and drive mitigation actions with internal teams and vendors.
• Create and maintain documentation; train on use cases, best practices, and SOPs for PAM.

Skills

CyberArk Privilege Cloud

PowerShell

Python scripting

Cloud platforms (AWS/Azure)

SIEM/Monitoring tools

Education

CyberArk CDE, Guardian, Trustee/Defender certifications

Tools

CyberArk connectors

Conjur

Job description

American Express Global Business Travel is seeking an experienced PAM specialist to manage privileged accounts and secrets within the CyberArk Privilege Cloud environment. You will support access rotation, auditing, and incident resolution while coordinating with internal teams and vendors to mitigate risks.

The role requires 8+ years of hands-on CyberArk Privilege Cloud experience and a relevant university degree or certifications.