Senior PAM Engineer — CyberArk Privileged Access Expert

American Express Global Business Travel; Annapolis (MD); On-site; USD 104,000 - 194,000; Full time

Benefits offered by this job

Flexible benefits

Travel perks

Learning platform access

Inclusion programs

Job summary

American Express Global Business Travel is seeking an experienced security professional to manage privileged access within CyberArk Privilege Cloud in a large enterprise environment.

The role focuses on PAM administration, access reviews, incident resolution, and collaboration with internal teams and vendors to mitigate risks, with a strong emphasis on documentation and training on best practices.

Qualifications

• 8+ years hands-on experience managing CyberArk Privilege Cloud in enterprise environments.
• Fluent English with strong interpersonal and consultative abilities; excellent written and verbal communication.
• University degree in Business, Information Technology, or equivalent certifications (CyberArk CDE, Guardian, Trustee/Defender, etc.).

Responsibilities

• Manage privileged accounts and secrets within PAM solution, ensuring security and compliance.
• Support access rotation, auditing, logging, and incident resolution for privileged sessions and service requests.
• Conduct access reviews, audit assessments, and compliance reporting for privileged accounts, secrets, and policies.
• Identify security risks and operational issues, developing actionable mitigation recommendations.
• Lead onboarding of accounts, servers, applications, and secrets to Privilege Cloud using CyberArk connectors and plugins.
• Execute root cause analysis on issues and drive mitigation actions with internal teams and vendors.
• Create and maintain documentation; conduct training on PAM use cases, best practices, and SOPs.

Skills

Fluent English

Education

University degree in Business or Information Technology

Tools

CyberArk Privilege Cloud

PowerShell

Python

AWS

Azure

SIEM

Job description

American Express Global Business Travel is seeking an experienced security professional to manage privileged access within CyberArk Privilege Cloud in a large enterprise environment.

The role focuses on PAM administration, access reviews, incident resolution, and collaboration with internal teams and vendors to mitigate risks, with a strong emphasis on documentation and training on best practices.