Senior PAM Engineer - CyberArk & Privileged Access

American Express Global Business Travel; Oklahoma City (OK); On-site; USD 104,000 - 194,000; Full time

Job summary

Amex GBT is seeking an experienced professional to manage CyberArk Privilege Cloud in a large enterprise environment. You will lead privileged access, secrets management, and related PAM operations, collaborating across teams to maintain security and compliance.

The role requires 8+ years in PAM with CyberArk, scripting skills in PowerShell or Python, and experience with cloud platforms (AWS/Azure). A university degree or CyberArk certifications are preferred.

Qualifications

• 8+ years hands-on experience managing CyberArk Privilege Cloud in enterprise environments.
• University degree or equivalent certifications in relevant fields.
• Strong English communication and collaboration skills.

Responsibilities

• Manage privileged accounts and secrets within PAM solution, ensuring security and compliance.
• Support access rotation, auditing, logging, and incident resolution for privileged sessions.
• Conduct access reviews and compliance reporting for privileged accounts and policies.
• Identify security risks and propose mitigations for significant risks.
• Lead onboarding of accounts, servers, apps, and secrets to Privilege Cloud via CyberArk connectors.
• Perform root cause analysis and coordinate remediation with internal teams and vendors.
• Create documentation and train on PAM use cases, best practices, and SOPs.

Skills

CyberArk Privilege Cloud

PowerShell

Python scripting

AWS

Azure

SIEM tools

English (fluent)

Team collaboration

Education

University degree in Business or IT

CyberArk certifications (CDE/Guardian/Defender)

Tools

CyberArk Privilege Cloud

CyberArk Secrets Hub

Conjur

Job description

Amex GBT is seeking an experienced professional to manage CyberArk Privilege Cloud in a large enterprise environment. You will lead privileged access, secrets management, and related PAM operations, collaborating across teams to maintain security and compliance.

The role requires 8+ years in PAM with CyberArk, scripting skills in PowerShell or Python, and experience with cloud platforms (AWS/Azure). A university degree or CyberArk certifications are preferred.