Systems Administrator

Position Description

Seeking an experienced Systems Administrator / Level 3 Individual contributor to work as part of a team to support a privileged access management (PAM) environment responsible for all functions associated with daily operations, security compliance and addressing support needs of subscribed endpoints and users to the service.  This position will work closely with other Laboratory enterprise IT groups including identity, cyber and endpoint management as well as federated IT within the research groups which consume PAM services.  Participation in on-call rotation and occasional off-hour support is required.  This position reports to the Enterprise Platforms & Infrastructure group within the Laboratory’s Information Services Department.

Primary Duties

Service Engineering and Platform Support

• Maintain system availability and operational readiness ensuring client connectivity, enterprise monitoring and logging functionality.
• Ensure platform meets organizational compliance requirements including software updates and vulnerability mitigation
• Resolves end-point conflict with PAM configuration as needed for Windows and Macintosh clients
• Administration of BeyondTrust Password Safe Application, including documentation, configuration, maintenance, troubleshooting, and performance optimizations.
• Support elevated user credential management configuration / secrets management and troubleshooting as needed
• Assists in the evaluation of enhancements to existing service configuration, processes, and services.
• Support project initiatives through capturing requirements, prototyping, systems design and validation
• Develops, publishes, and maintains system documentation (e.g. Requirements, Design/Build, Testing, and Standard Operating Procedures) according to project management best practices

Day-to-day support for all aspects of the team’s operational services

• Review PAM console for suspect elevation and work with the Laboratory’s Cyber team to address
• Monitor Service Now for incidents / service request for PAM configuration and work with end-users and tier 1 / 2 support team(s) to address as needed
• Work with PAM vendor to escalate support items, track vulnerability remediation and plan for system upgrades
• Experience in working with commercial privileged access management solutions (Beyond Trust, preferred, or CyberArk) to deploy, manage and create / update end-point configuration policies
• Solid understanding of end-point architecture for Windows / Macintosh to align with PAM policy configuration
• Experience maintaining documentation of processes, procedures, troubleshooting guides and change management
• Ability to learn new technologies and disciplines quickly
• Strong communication skills (presentation, writing and interpersonal / networking skills), accountability and engagement as well as ability to assess situational awareness and collaborate effectively across multiple teams of different technical levels.
• Very strong problem-solving skills and ability to work autonomously while reporting status at appropriate level
• Solid understanding of key security principles and best practices including security-by-design, vulnerability remediation and security operations.  Understanding of NIST 800-171 desirable. 

Minimum Qualifications

• Typically, a Bachelors Degree plus a minimum of 4 years of experience OR equivalent
• Detailed hands-on knowledge PAM commercial solutions (Beyond Trust, preferred, or CyberArk)
• Hands-on knowledge of Microsoft Windows, Apple Macintosh architecture and systems management
• Strong knowledge of core networking protocols and troubleshooting (e.g. DNS, NTP, DHCP, SNMP, TCP/IP, SSH, HTTP(s), LDAP, WINS, SSL/TLS, NFS, CIFS)
• Ability to program in a scripting language (e.g. Bash, Python, and/or PowerShell) to automate basic processes

Preferred Qualifications

• ITIL v3 Foundations Certification
• Ability to script or program in languages such as Bash, Python, PowerShell, C# or Java
• Familiarity with Splunk logging
• Familiarity with Linux platforms (e.g., Red Hat, Ubuntu) is preferred but not required.
• Familiarity with Basic PKI concepts and certificate management

Other Qualifications

• Ability to obtain and maintain a security clearance is required for this position
• Rely on experience and judgment to plan and accomplish goals.
• Role requires flexibility and creative problem-solving skills to address evolving technical challenges

Administrative Duties

• Develops, publishes, and maintains system documentation (e.g. Requirements, Design/Build, Testing, and SOP) according to department standards. 
• Develops and delivers training for peers and/or end-users on service features, enhancements or new applications to increase service adoption and usage.
• Participation in on-call rotation and occasional off-hour support is required