Information Security Analyst-CyberArk Privileged Access Security (CorePAS) Solution- REMOTE OR HYBRID

At American Express, we know that with the right backing, people and businesses have the power to progress in incredible ways. Whether we're supporting our customers' financial confidence to move ahead, taking commerce to new heights, or encouraging people to explore the world, our colleagues are constantly redefining what's possible - and we're proud to back each other every step of the way.

When you join Team Amex, you become part of a diverse community of over 60,000 colleagues, all with a common goal to deliver an exceptional customer experience every day. Here, you'll learn and grow as we champion your meaningful career journey with programs, benefits, and flexibility to back you personally and professionally. Every colleague share in the company's success.

Together, we'll win as a team, striving to uphold our company values and powerful backing promise to our customers, communities, and each other every day. And we'll do it with integrity and in an environment where everyone is seen, heard and feels like they truly belong. Join #TeamAmex and let's lead the way together.

Description:

From building next-generation apps and microservices in Kotlin to using AI to help protect our customers from fraud, you could be doing transformational work that brings our iconic, global brand into the future. As a part of our tech team, we could work together to bring ground-breaking and diverse ideas to life that power the digital systems, services, products and platforms that millions of customers around the world depend on. If you love to work with APIs, contribute to open source, or use the latest technologies, we'll support you with an open environment and learning culture to grow your career.

Organizational Context:

Works with technology and business partners across business functions/processes to ensure alignment, understanding and ongoing communication on security controls, compliance and information security risk management. Works individually and with teams on both structured and unstructured assignments.

How will you make an impact in this role?

• Ensure availability of PAM services as per stated SLAs
• Responsible for responding to service interruptions and outages and restoration of service as per committed service agreements.
• Administer & manage appointed PAM solutions and all underlying components including but not limited to, credential vaulting & management, policy based fine grained entitlement management, session brokering & management and integrations with enterprise Data Warehouse, SIEM & system monitoring tools.
• Handle new integration/entitlement policy update requests
• Handle Incident, change & problem management within the PAM service span.
• Participate in all key activities related to service availability & continuity including DR exercises
• Ensure PAM service meets all service parameters and KPIs.
• Regular reporting of PAM service SLAs & KPIs and adherence to associated targets.
• Closely collaborate with PAM architecture & engineering team on enhancements, new service functionalities & components.
• Lead the operationalization of new service offerings, components & integrations.
• Ensure that the PAM service, solutions & implementations are in complete adherence to AXP & regulatory controls and audit requirements (PCI DSS, SOX etc)
• Work closely with other associated functional areas both within and outside IAM organization to ensure seamless PAM service delivery.
• Propose, lead & drive initiatives that positively contributes to the overall IAM service portfolio & roadmap.

As part of our diverse tech team, you can architect, code and ship software that makes us an essential part of our customers' digital lives. Here, you can work alongside talented engineers in an open, supportive, inclusive environment where your voice is valued, and you make your own decisions on what tech to use to solve challenging problems. Amex offers a range of opportunities to work with the latest technologies and encourages you to back the broader engineering community through open source. And because we understand the importance of keeping your skills fresh and relevant, we give you dedicated time to invest in your professional development. Find your place in technology on #TeamAmex.

Qualifications:

• Minimum 5 years of hands-on experience in deployment & operation of large-scale implementation of CyberArk Privileged Access Security (CorePAS) solution, capabilities & platform management
• Should have implemented integration, discovery, onboarding & automated password management on at least 2 (two) of the following endpoints: servers, EUCs, databases, network devices & Cloud workloads
• Should have performed at least 1 (one) large scale implementation of Privileged Session Manager (PSM) solution for Unix, Windows & HTML based endpoints.
• Should have developed at least 5 (five) custom plugins for both password management (CPM) and session brokering (PSM) for endpoint management.
• Knowledge in deployment & operation of Application Identity Manager (AIM) solution, including Conjur (preferred)
• Knowledge of CyberArk PTA & Alero solutions (good to have)
• Good understanding of Directory structure, attribute/schema and PAM integration with Active Directory, LDAP based directory services
• Exposure to enterprise service operations tools like ServiceNow, DynaTrace, Puppet etc.
• Hands-on experience in handling service operations, incident & problem management in large-scale & geographically disparate environments.
• Understanding of broader IAM solution landscape, including but not limited to, Identity Lifecycle Management, Web Access Management & Identity Governance.
• Experience in Puppet, Ansible or equivalent automation tools (good to have)
• Deep understanding of IT security & IAM requirements & capabilities in public cloud platforms - AWS, GSP & Azure.(good to have)
• Good understanding of regulatory standards including PCI DSS, SOX, NIST etc. (good to have)
• Experience in BFSI & Retail industry (good to have)

REQ#22030181

Salary Range: $85,000.00 to $150,000.00 annually + bonus + benefits

The above represents the expected salary range for this job requisition. Ultimately, in determining your pay, we'll consider your location, experience, and other job-related factors.

American Express is an equal opportunity employer and makes employment decisions without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, veteran status, disability status, age, or any other status protected by law.

We back our colleagues with the support they need to thrive, professionally and personally. That's why we have Amex Flex, our enterprise working model that provides greater flexibility to colleagues while ensuring we preserve the important aspects of our unique in-person culture. Depending on role and business needs, colleagues will either work onsite, in a hybrid model (combination of in-office and virtual days) or fully virtually.

US Job Seekers/Employees - Click here to view the "EEO is the Law" poster and supplement and the Pay Transparency Policy Statement.

Employment eligibility to work with American Express in the U.S. is required as the company will not pursue visa sponsorship for these positions.

If the links do not work, please copy and paste the following URLs in a new browser window: https://www.dol.gov/agencies/ofccp/posters to access the three posters.