PAM Engineer

About the role

Amex GBT is looking for a seasoned PAM Engineer to manage privileged accounts and secrets within our Privileged Access Management (PAM) platform. You will work remotely from Costa Rica, supporting operational processes, audits, and incident resolution while ensuring compliance and security across our global environment.

Key responsibilities

• Manage privileged accounts and secrets in CyberArk Privilege Cloud.
• Support access rotation, auditing, and logging of privileged sessions.
• Conduct access reviews, audit reporting, and compliance documentation.
• Onboard accounts, servers, applications, and secrets using CyberArk connectors and plugins.
• Resolve incidents, fulfill service requests, and perform root‑cause analysis.
• Create and maintain SOPs, documentation, and training materials for PAM best practices.

Required profile

• 8+ years of experience with CyberArk Privilege Cloud.
• Strong interpersonal and consultative skills with the ability to work under minimal supervision.
• Excellent written and verbal communication.
• Experience in a collaborative, team‑oriented environment.

Required skills

• CyberArk Privilege Cloud (including CDE, Guardian, Trustee/Defender certifications).
• Scripting with PowerShell and Python.
• Managing secrets via CyberArk Secrets Hub, Conjur, etc.
• Cloud platforms: AWS, Azure.
• Logging and monitoring tools: Sysmon, SIEM.

What we offer

• Flexible benefits tailored to each country, including health, retirement, parental leave, and wellbeing resources.
• Travel perks with weekly deals on flights, hotels, cruises, and car rentals.
• Access to over 20,000 learning courses, leadership programs, and internal job opportunities.