Position Overview

Amex GBT is a place where colleagues find inspiration in travel as a force for good and can make a meaningful impact on our industry. We foster an inclusive and collaborative culture where your voice is valued.

We are seeking a Privileged Access Management (PAM) Engineer to support the implementation and operational processes of CyberArk Privileged Access Management (PAM) and Endpoint Privilege Management (EPM) environments.

If you're passionate about security, privileged access, and endpoint protection, this is your opportunity to grow with a world-class team!

Key Responsibilities

Privileged Access & Endpoint Privilege Management

✔ Support deployment, configuration, and management of EPM solutions in hybrid environments (on-premises & cloud).
✔ Manage endpoint policies to enforce least privilege and reduce attack surfaces using RBAC principles.
✔ Develop, configure, and maintain automation scripts/tools to manage EPM policies.
✔ Create and implement new policies or versions of EPM for new devices/users.
✔ Perform ongoing testing, upgrades, and patching of EPM agents.

Monitoring & Compliance

✔ Conduct regular health checks to enhance security and monitor privileged sessions.
✔ Manage privileged accounts/secrets in the PAM solution.
✔ Support access rotation, auditing, and logging of privileged sessions.
✔ Conduct access reviews, audits, and compliance reporting for privileged accounts/secrets and access policies.
✔ Implement onboarding of accounts, servers, and applications to Privilege Cloud using CyberArk connectors/plugins.

Incident & Service Management

✔ Resolve incidents and fulfill service requests related to access, configurations, and artifacts for PAM & EPM.
✔ Work with Incident Management, Change Management, and SOX/PCI controls in an enterprise environment.
✔ Set up logging, monitoring, and troubleshooting tools like Sysmon, SIEMs, etc.

Documentation & Training

✔ Create and maintain standard operating procedures (SOPs) for PAM & EPM.
✔ Conduct training sessions and knowledge-sharing workshops for best practices.

Qualifications & Requirements

Technical Skills & Experience

???? 6+ years of experience in PAM & EPM solutions (Design, Engineering, and Operations).
???? Expertise in Privileged Identity & Access Management solutions (CyberArk, BeyondTrust).
???? Proficiency in scripting & automation tools such as PowerShell, Python, and deployment tools like SCCM, JAMF.
???? Experience in Incident Management, Change Management, and regulatory compliance (SOX/PCI).
???? Familiarity with logging, monitoring, and troubleshooting tools (Sysmon, SIEMs).

Soft Skills

✔ Strong interpersonal & consultative skills.
✔ Ability to prioritize tasks & work in a high-pressure environment.
✔ Excellent written & verbal communication skills.
✔ Team-oriented and collaborative mindset.
✔ Ability to work independently with minimal supervision.

Education & Certifications

???? University degree in Information Technology or equivalent field.
???? Certifications (CISSP or relevant certifications) are a plus.

The #TeamGBT Experience

???? Flexible Work & Benefits:
✔ Health & welfare insurance plans
✔ Retirement programs
✔ Parental leave & adoption assistance
✔ Mental health & well-being resources

???? Travel Perks:
✔ Weekly deals from major travel providers on flights, hotels, cruises, and car rentals

???? Career Growth & Learning:
✔ Access to 20,000+ courses on our learning platform
✔ Leadership development programs
✔ Internal job openings available first to employees

???? Diversity, Equity & Inclusion:
✔ Connect with colleagues via global Inclusion Groups
✔ Discuss challenges, achievements & drive company-wide awareness

Equal Opportunity Employer

All applicants will receive equal consideration for employment without regard to age, sex, gender, pregnancy, race, color, citizenship, religion, disability, or any protected class.

We are committed to providing reasonable accommodations for individuals with disabilities. Please inform your recruiter if you need accommodations during the hiring process.

???? What if I don’t meet every requirement?
If you're passionate about cybersecurity and believe you’d be a great fit, we encourage you to apply anyway! You may be the perfect candidate we’re looking for.

???? Start your journey with Amex GBT today! ????

4o