Senior PAM Engineer - CyberArk | Remote

American Express Global Business Travel; United States; Remote; USD 120,000 - 150,000; Full time

Job summary

American Express Global Business Travel is seeking a senior PAM specialist to manage privileged accounts and secrets using CyberArk Privilege Cloud. You will support access rotation, audits, and incident resolution while developing risk mitigation strategies.

The role includes onboarding cloud resources and producing documentation. The ideal candidate has 8+ years with CyberArk Privilege Cloud, scripting skills, and experience with AWS/Azure.

Qualifications

• 8+ years of experience with CyberArk Privilege Cloud.
• University degree in Business or IT or equivalent.
• Scripting with PowerShell or Python for PAM configurations.
• Experience managing secrets with CyberArk via Secrets Hub or Conjur.
• Familiarity with cloud environments like AWS and Azure.
• Experience with logging/monitoring tools such as Sysmon and SIEM.

Responsibilities

• Manage privileged accounts and secrets in PAM solution.
• Support access rotation, auditing, and logging of privileged sessions.
• Conduct access reviews, audits, and compliance reporting.
• Identify risks and develop mitigation recommendations.
• Onboard accounts, servers, apps, and secrets to Privilege Cloud with CyberArk connectors.
• Resolve incidents and fulfill service requests for PAM configurations.
• Perform root cause analysis and collaborate with vendors as needed.
• Create documentation and conduct training on PAM use cases and SOPs.

Skills

Interpersonal skills

Consultative skills

Prioritization

Communication

Teamwork

Autonomy

Education

University degree in Business or IT

Tools

CyberArk Privilege Cloud

PowerShell

Python

Secrets Hub

Conjur

AWS

Azure

Sysmon

SIEM

Job description

American Express Global Business Travel is seeking a senior PAM specialist to manage privileged accounts and secrets using CyberArk Privilege Cloud. You will support access rotation, audits, and incident resolution while developing risk mitigation strategies.

The role includes onboarding cloud resources and producing documentation. The ideal candidate has 8+ years with CyberArk Privilege Cloud, scripting skills, and experience with AWS/Azure.