Intermediate ICAM System Administrator

Intermediate ICAM Systems Administrator

Remote

Grant Leading Technology is seeking a hands-on Linux and Windows Systems Administrator to join our dynamic team. This role will encompass the infrastructure and day-to-day operation of cybersecurity technologies and maintain reliable and secure systems, troubleshoot infrastructure and application issues, develop scripts and automation, manage logs, monitor system resources and some support off-hours. This position is remote, with standard hours of 8 a.m. to 5 p.m. Eastern Time, subject to client confirmation. Off hours support to include rotating “on call” hours, one week per month.

Responsibilities

• Administer Linux and Windows Server environments, including installation, configuration, patching, upgrades, services, permissions, storage, and performance tuning. Maintain supported operating system versions and approved configurations.
• Support servers, services, agents, and integrations used by CyberArk, Ping, and NokNok. Coordinate platform changes with product owners and security engineers; validate functionality following maintenance and upgrades.
• Troubleshoot Linux and Windows authentication, network connectivity issues like SSH and RDP connectivity, service accounts, certificates, DNS, network connectivity, and application dependencies. Investigate CyberArk privileged-session issues, including PSMP and SSH, where deployed.
• Manage and maintain Microsoft Entra infrastructure including Microsoft Intune, Purview, and Defender
• Develop and maintain PowerShell and Bash scripts for health checks, service monitoring, inventory, reporting, log collection, and routine administration. Use Python and APIs when appropriate. Document, test, version-control, and securely manage automation credentials.
• Automate log collection, parsing, rotation, archival, retention, and disk-space cleanup in accordance with approved policies. Validate forwarding to designated centralized logging or SIEM tools and protect sensitive information in logs.
• Monitor for server availability, CPU, memory, disk capacity, processes, services, and application health using available modules. Tune thresholds, dashboards, notifications, and escalation procedures to reduce missed issues and unnecessary alerts.
• Apply approved hardening baselines and remediate vulnerabilities. Maintain least-privilege access, service account permissions, certificates, and SSH keys in coordination with security and identity teams.
• Monitor, triage, and resolve incoming incident and service request tickets in accordance with program SLAs. Document resolutions, track recurring issues, and ensure proper escalation when needed.
• Perform routine application onboarding tasks for Single Sign-On (SSO) and identity tools (e.g., Ping, CyberArk), including integration validation, target configuration, and provisioning support during steady-state cycles.
• Perform and validate backups, configuration recovery, and restoration procedures. Participate in disaster recovery testing and document dependencies, recovery steps, and results.
• Respond to incidents and service requests, perform root cause analysis, and coordinate with vendors and engineering teams. Follow change control, document rollback plans, and support approved maintenance windows.
• Maintain inventories, configuration records, runbooks, Technical Solution Diagrams (TSDs), and operating procedures. Provide monitoring reports and technical evidence for audits and share knowledge with team members.
• Respond to alerts and outages during working hours, scheduled outages, and unexpected outages.
• Help to support as needed directed by Senior Management

Qualifications and Education Requirements

• Bachelor’s degree in information technology, computer science, cybersecurity, or a related field, or equivalent relevant experience, subject to contract requirements.
• Minimum of five (5) to eight (8) years of hands-on systems administration experience, including production support for both Linux and Windows Server environments. Demonstrated ability to independently troubleshoot operating systems, services, permissions, and performance issues.
• Minimum of two (2) years of hands-on experience with AWS GovCloud or Google GCP for Government.
• Practical experience developing and maintaining PowerShell and Bash scripts, including error handling, logging, scheduled execution, testing, and version control.
• Experience supporting at least one (1) of the following Cybersecurity products: CyberArk (Idira), PingIdentity, and/or NokNok, with the ability to learn and support the broader environment in coordination with platform specialists.
• Experience managing Microsoft Entra policies and infrastructure including Defender, Purview and Intune with SIEM monitoring.
• Experience using SolarWinds or similar tool(s) to monitor server resources and service availability, investigate alerts, and maintain dashboards and thresholds.
• Practical understanding of user provisioning and basic application onboarding workflows within an identity or access management framework.
• Working knowledge of TCP/IP, DNS, firewalls, SSH, RDP, TLS certificates, Active Directory, and Linux authentication; experience investigating logs and resolving access and connectivity issues.
• Experience with patching, vulnerability remediation, backups and restoration, incident management, change control, and clear technical documentation.
• Strong communication and customer-service skills; ability to coordinate with cybersecurity, network, application, and vendor teams and manage competing operational priorities.
• Experience working with the federal government
• Ability to pass the required Federal Government background check. Must reside in the United States and be authorized to work in the U.S.

Preferred Skills

• Experience supporting multiple listed cybersecurity platforms, including CyberArk PSMP/PSM and privileged access workflows, Ping federation and SSO, NokNok passwordless authentication, or SailPoint identity lifecycle integrations.
• Familiarity with SAML, OAuth, OpenID Connect, LDAP, SCIM, Kerberos, and FIDO2/WebAuthn; practical troubleshooting of identity and authentication integrations.
• Familiarity with Ansible, and Centrify
• Experience with Python, REST APIs, Ansible or similar configuration automation, centralized logging or SIEM tools, and virtualized or cloud-hosted infrastructure.
• Federal agency support experience; familiarity with applicable NIST controls, CIS benchmarks, or DISA STIGs. Relevant SE-Linux, Microsoft, SolarWinds, or cybersecurity platform certifications.

About Grant Leading Technology

Grant Leading Technology (GLT) is a verified Service-Disabled Veteran Owned Small Business (SDVOSB) government contracting firm. GLT provides expert knowledge and skills to deliver agile enterprise solutions and innovative technologies to our clients at the Federal Aviation Administration (FAA), Internal Revenue Service (IRS), Federal Emergency Management Agency (FEMA), National Aeronautics and Space Administration (NASA), and other federal and state agencies. We possess exceptional capabilities including, but not limited to, project management, cyber security, construction management, design, and management technology. GLT has been recognized for three consecutive years by Inc. 5000 as one of the fastest-growing private companies in America.

Our employees are at the heart of GLT’s success. We value and fully embrace the diversity of individuals and ideas within our workforce. GLT provides a competitive compensation package with benefits that are immediately available. Our base healthcare plan is 100% employer paid and our 401k plan is immediately vested. We also offer paid time off, 11 federal holidays, short/long-term disability, 401k matching, and opportunities for professional development.

www.grantleadingtechnology.com

*Grant Leading Technology is an “equal opportunity employer”. All qualified applicants will receive consideration for employment without regard to race, color, religion, gender, gender identity or expression, sexual orientation, national origin, genetics, disability, age, or veteran status. Reasonable accommodations will be provided to those who are unable to utilize our online application system due to a disability. Please email recruiting@grantleadingtechnology.com with the subject line “Accommodation”