Senior PAM Engineer - CyberArk & Privileged Access

American Express Global Business Travel; Richmond (VA); On-site; USD 104,000 - 194,000; Full time

Benefits offered by this job

Flexible benefits

Travel perks

Learning & development resources

Job summary

American Express Global Business Travel is seeking a skilled PAM professional to manage privileged accounts and automate access controls across enterprise environments. You will implement CyberArk Privilege Cloud integrations, conduct audits, and drive security improvements with internal teams and vendors.

The role requires 8+ years of CyberArk Privilege Cloud experience, strong scripting skills, and the ability to operate in a global, fast-paced setting.

Qualifications

• 8+ years of hands-on experience managing CyberArk Privilege Cloud in enterprise environments.
• University degree in Business, Information Technology, or equivalent certifications.
• Proven ability to prioritize and execute tasks under high pressure while collaborating in teams.
• Self-motivated with minimal supervision and sound judgment.
• Flexibility to support global operations and varying schedules.
• Experience with PowerShell or Python scripting, cloud environments, and SIEM tools.

Responsibilities

• Manage privileged accounts and secrets within our PAM solution, ensuring security and compliance.
• Support access rotation, auditing, logging, and incident resolution for privileged sessions and service requests.
• Conduct access reviews, audits, and compliance reporting for privileged accounts and policies.
• Identify security risks and operational issues; develop actionable mitigation recommendations.
• Lead onboarding of accounts, servers, apps, and secrets to Privilege Cloud using CyberArk connectors/tools.
• Perform root cause analyses and coordinate mitigation with internal teams and vendors.
• Create and maintain documentation; train on use cases, best practices, and SOPs for PAM.

Skills

Fluent English

CyberArk Privilege Cloud

Interpersonal skills

PowerShell scripting

Python scripting

Cloud environments (AWS, Azure)

SIEM/monitoring tools

Education

University degree in Business or Information Technology

CyberArk CDE / Guardian / Defender certifications

Tools

CyberArk connectors

CyberArk Secrets Hub / Conjur

SIEM tools

AWS

Azure

Job description

American Express Global Business Travel is seeking a skilled PAM professional to manage privileged accounts and automate access controls across enterprise environments. You will implement CyberArk Privilege Cloud integrations, conduct audits, and drive security improvements with internal teams and vendors.

The role requires 8+ years of CyberArk Privilege Cloud experience, strong scripting skills, and the ability to operate in a global, fast-paced setting.