Intermediate ICAM System Administrator

Intermediate ICAM Systems Administrator Remote Grant Leading Technology is seeking a hands-on Linux and Windows Systems Administrator to join our dynamic team.

This role will encompass the infrastructure and day-to-day operation of cybersecurity technologies and maintain reliable and secure systems, troubleshoot infrastructure and application issues, develop scripts and automation, manage logs, monitor system resources and some support off-hours.

This position is remote, with standard hours of 8 a.m.

to 5 p.m.

Eastern Time, subject to client confirmation.

Off hours support to include rotating on call hours, one week per month.

Responsibilities Administer Linux and Windows Server environments, including installation, configuration, patching, upgrades, services, permissions, storage, and performance tuning.

Maintain supported operating system versions and approved configurations.

Support servers, services, agents, and integrations used by CyberArk, Ping, and NokNok.

Coordinate platform changes with product owners and security engineers; validate functionality following maintenance and upgrades.

Troubleshoot Linux and Windows authentication, network connectivity issues like SSH and RDP connectivity, service accounts, certificates, DNS, network connectivity, and application dependencies.

Investigate CyberArk privileged-session issues, including PSMP and SSH, where deployed.

Manage and maintain Microsoft Entra infrastructure including Microsoft Intune, Purview, and Defender Develop and maintain PowerShell and Bash scripts for health checks, service monitoring, inventory, reporting, log collection, and routine administration.

Use Python and APIs when appropriate.

Document, test, version-control, and securely manage automation credentials.

Automate log collection, parsing, rotation, archival, retention, and disk-space cleanup in accordance with approved policies.

Validate forwarding to designated centralized logging or SIEM tools and protect sensitive information in logs.

Monitor for server availability, CPU, memory, disk capacity, processes, services, and application health using available modules.

Tune thresholds, dashboards, notifications, and escalation procedures to reduce missed issues and unnecessary alerts.

Apply approved hardening baselines and remediate vulnerabilities.

Maintain least-privilege access, service account permissions, certificates, and SSH keys in coordination with security and identity teams.

Monitor, triage, and resolve incoming incident and service request tickets in accordance with program SLAs.

Document resolutions, track recurring issues, and ensure proper escalation when needed.

Perform routine application onboarding tasks for Single Sign-On (SSO) and identity tools (e.g., Ping, CyberArk), including integration validation, target configuration, and provisioning support during steady-state cycles.

Perform and validate backups, configuration recovery, and restoration procedures.

Participate in disaster recovery testing and...