Senior PAM Engineer — CyberArk Privilege Cloud Expert

American Express Global Business Travel; Denver (CO); On-site; USD 104,000 - 194,000; Full time

Job summary

American Express Global Business Travel is seeking an experienced Security Engineer to manage privileged accounts and secrets within our PAM environment at our US-based Denver location. You will drive access governance, audit readiness, and incident response for CyberArk-driven workflows.

The role requires 8+ years with CyberArk Privilege Cloud, strong English communication, and a university degree or equivalent certifications in IT or business.

Qualifications

• 8+ years hands-on experience with CyberArk Privilege Cloud in enterprise settings.
• University degree in Business or Information Technology, or equivalent certifications.
• Strong English communication and ability to work under pressure.

Responsibilities

• Manage privileged accounts and secrets within our Privileged Access Management (PAM) solution, ensuring security and compliance standards are maintained.
• Support operational processes for access rotation, auditing, logging, and incident resolution related to privileged sessions and service requests.
• Conduct access reviews, audit assessments, and compliance reporting for privileged accounts, secrets, and access policies.
• Identify security risks and operational issues, developing actionable recommendations to mitigate significant risks and resolve complex challenges.
• Lead onboarding of accounts, servers, applications, and secrets to Privilege Cloud using CyberArk connectors and plugins.
• Execute root cause analysis on issues and drive mitigation actions, collaborating with internal teams and vendors as needed.
• Create and maintain documentation; conduct training sessions on use cases, best practices, and standard operating procedures for Privileged Access Management.

Skills

Fluent English

Interpersonal skills

Prioritization

Autonomy

Education

University degree in Business or IT

CyberArk CDE/Guardian/Defender certs

Tools

CyberArk Privilege Cloud

CyberArk Secrets Hub or Conjur

Job description

American Express Global Business Travel is seeking an experienced Security Engineer to manage privileged accounts and secrets within our PAM environment at our US-based Denver location. You will drive access governance, audit readiness, and incident response for CyberArk-driven workflows.

The role requires 8+ years with CyberArk Privilege Cloud, strong English communication, and a university degree or equivalent certifications in IT or business.