Job Overview

Job Title: Privileged Access Management Engineer
Job Type: Full-Time
Location: India

About Us – Amex GBT

American Express Global Business Travel (Amex GBT) is a place where colleagues find inspiration in travel as a force for good. Through their work, they make a lasting impact on the travel industry. We promote an inclusive and collaborative culture where your voice is valued and your success is supported.

Ready to explore a career path? Start your journey with us.

Position Overview

We are seeking a Privileged Access Management Engineer to support the implementation and ongoing operations of our CyberArk Privileged Access Management (PAM) and Endpoint Privilege Management (EPM) environment.

What You’ll Do on a Typical Day

• Deploy, configure, and manage EPM solutions for endpoint devices across hybrid environments (on-prem & cloud).

• Enforce least privilege policies using role-based access control (RBAC).

• Develop and maintain automation scripts/tools for EPM policy management.

• Plan and roll out new EPM policies to devices/users.

• Conduct regular health checks and monitor privileged sessions and access policy enforcement.

• Manage testing, upgrades, and patching of EPM agents.

• Administer privileged accounts and secrets within PAM solutions.

• Support processes for access rotation, audit, and logging of privileged sessions.

• Conduct access reviews and generate audit/compliance reports.

• Onboard accounts, servers, and applications into Privilege Cloud using CyberArk connectors and plugins.

• Resolve incidents and service requests related to PAM and EPM configurations and access.

• Maintain documentation and lead training sessions on best practices and SOPs.

What We’re Looking For

• Experience:

  • 6+ years in PAM and EPM design, engineering, and operations.

  • Expertise with industry-leading tools (CyberArk, BeyondTrust).

  • Experience in enterprise environments and knowledge of SOX/PCI controls.

• Technical Skills:

  • Scripting (PowerShell, Python)

  • Deployment tools (SCCM, JAMF)

  • Monitoring tools (Sysmon, SIEMs)

• Soft Skills:

  • Strong communication and interpersonal skills.

  • Team-oriented, collaborative mindset.

  • Ability to work independently and manage priorities in high-pressure environments.

Education & Certifications

• Bachelor’s degree in Information Technology or a related field.

• Relevant certifications (e.g., CISSP) are a plus.

Why Join #TeamGBT?

• Flexible Benefits: Starting on day one, including health insurance, retirement plans, parental leave, adoption assistance, and more.

• Travel Perks: Weekly deals on flights, hotels, cruises, and rentals.

• Learning & Development: Tuition assistance, access to 20,000+ courses, leadership programs, and priority access to internal job openings.

• Inclusion & Belonging: Participate in global Inclusion Groups to connect, share, and grow.

• Wellbeing Support: Resources to help support your mental and emotional health.

• Equal Opportunity Employer: We celebrate diversity and are committed to providing reasonable accommodations for individuals with disabilities.

Not Sure You Check Every Box?

Don’t worry! If you’re passionate about our mission and believe you’d be a great addition to the team, we encourage you to apply anyway.

For information on how we protect your data, please review the GBT Recruitment Privacy Statement.

Let me know if you'd like this converted into a PDF, tailored for a cover letter, or adjusted for a LinkedIn post!

4o