Linux & Windows Administrator with CyberArk experience (m/f) - Remote

Linux & Windows Administrator with CyberArk experience (m/f)

Start: ASAP

Duration: 6 months

Location: remote

1. Role Summary

We are looking for a senior engineer-SME who combines deep operating system expertise (Linux and Windows), hands-on mastery of public cloud platforms, and strong identity security capability across IAM, PAM (CyberArk) and IGA.

2. Key Responsibilities

2.1 Operating Systems (Linux & Windows)

• Install, build, configure and harden Linux (RHEL, SUSE) and Windows Server systems; perform all administrative tasks via terminal/PowerShell, including file manipulation, package installation, filesystem management and user/permission configuration.
• Lead response to malware and ransomware incidents: containment, eradication, recovery, hardening and lessons learned.

2.2 Hyperscalers (AWS, Azure, GCP)

• Configure and enforce hyperscaler policies (eg, Azure Policy, AWS SCP/Config, GCP Organization Policy) following best practice.
• Define and map roles, groups and permissions across hyperscalers and Linux/Windows environments using least privilege.

2.3 Identity & Access Management (IAM)

• Handle authentication issues and incidents across OS and cloud platforms, including integration troubleshooting and hardening.
• Integrate platforms with enterprise identity providers (Entra ID, AD, and others) and with CyberArk Identity Security Platform Shared Services (ISPSS) for MFA and SSO.
• Define role models and RBAC/ABAC patterns that span OS, hyperscaler and application layers.

2.4 Privileged Access Management (CyberArk)

• Securely install, configure and troubleshoot CyberArk for Linux environments, including best practices for creating reconciliation accounts on Linux Servers.
• Monitor the health of the CyberArk Privilege Cloud tenant and manage availability of on-premises Connector components (CPM and PSM); perform routine maintenance and patching to ensure secure session brokering.
• Onboard and manage privileged credentials for Windows (Active Directory) and Linux (SSH) systems across their full life cycle.
• Provide Just-in-Time (JIT) privileged access for infrastructure and cloud teams.

2.5 Identity Governance & Administration (IGA)

• Integrate IGA with target systems (Linux, Windows, AD, hyperscalers, CyberArk, SAP) via connectors and APIs; support role mining and role engineering.
• Produce audit evidence and reporting for regulatory and internal compliance (eg, ISO 27001, SOX, GDPR).

3. Required Skills & Experience:

Linux (RHEL, SUSE)

Install, administer, patch, harden, tune, filesystems, package and user management

Windows Server

Install, administer, AD, GPO, patching, PowerShell

Hyperscalers (AWS/Azure/GCP)

Migration, tenant/management group design, policy, IaaS/PaaS, cost

IAM and authentication

Federation, LDAP, RBAC

CyberArk PAM

Linux and Windows onboarding, CPM/PSM, reconciliation, Privilege Cloud