Senior Privileged Access Engineer | CyberArk Expert

American Express Global Business Travel; Concord (NH); On-site; USD 104,000 - 194,000; Full time

Job summary

American Express Global Business Travel is seeking a seasoned cybersecurity professional to manage CyberArk Privilege Cloud in a global enterprise. You will oversee privileged accounts, conduct access reviews, and drive incident resolution for privileged sessions and service requests.

The role requires 8+ years of hands-on CyberArk experience, a university degree in Business or IT, and certifications such as CyberArk CDE.

Qualifications

• 8+ years of hands-on experience managing CyberArk Privilege Cloud in enterprise environments.
• University degree in Business, IT, or related field with relevant certifications.
• Fluent English with strong interpersonal and consultative abilities.

Responsibilities

• Manage privileged accounts and secrets within PAM, ensuring security and compliance.
• Support access rotation, auditing, logging, and incident resolution for privileged sessions.
• Conduct access reviews, audits, and compliance reporting for privileged accounts and policies.
• Identify security risks and operational issues; develop actionable mitigation recommendations.
• Lead onboarding of accounts and secrets to Privilege Cloud using CyberArk connectors.
• Perform root cause analysis and drive mitigation actions with internal teams and vendors.
• Create documentation and train teams on PAM use cases and SOPs.

Skills

Cybersecurity

Communication

Teamwork

Problem solving

Education

University degree in Business or IT

CyberArk CDE / Guardian / Defender certifications

Tools

CyberArk Privilege Cloud

PowerShell

Python

AWS

Azure

SIEM monitoring tools

CyberArk Secrets Hub/Conjur

Job description

American Express Global Business Travel is seeking a seasoned cybersecurity professional to manage CyberArk Privilege Cloud in a global enterprise. You will oversee privileged accounts, conduct access reviews, and drive incident resolution for privileged sessions and service requests.

The role requires 8+ years of hands-on CyberArk experience, a university degree in Business or IT, and certifications such as CyberArk CDE.