Windows Admin / CyberArk PAM

Windows Server & Workstation Administration

• Administer Windows Servers RDP access, local user/group management, GPO configuration, and IAM-related access controls

• Manage Windows workstations local account administration, group membership, GPO enforcement, and security hardening

• Understand and apply IAM principles (least privilege, separation of duties) across server and workstation environments

CyberArk & Endpoint Security Operations

• Support CyberArk Privileged Cloud operations account onboarding, safe management, and platform configurations

• Troubleshoot CyberArk ticket issues including password rotation failures, CPM errors, session connectivity, and account lockouts

• Support endpoint security tools including CyberArk EPM and CrowdStrike policy management, exclusions, and incident triage

Automation & Scripting

• Write PowerShell scripts to automate routine tasks account provisioning, reporting, health checks, and bulk operations

• Leverage CyberArk and other APIs to build automation for onboarding, credential management, and integration workflows

Documentation & Process

• Create and maintain process documentation SOPs, runbooks, knowledge articles, and troubleshooting guides. Assist in audits when required.

• Keep documentation current with platform changes, new procedures, and lessons learned

Communication & Operational Metrics

• Demonstrate excellent communication prompt follow-up and response to tickets, emails, and team chat

• Maintain operational metrics by ensuring incidents and service requests are resolved and closed within SLA

• Provide regular status updates to stakeholders; escalate appropriately when SLAs are at risk.

• Skills:

• 5+ years in IT operations with focus on Windows and/or PAM technologies

• Strong Windows Server skills RDP, local users/groups, GPO, IAM concepts, service accounts

• Windows workstation administration same as above applied to endpoint environments

• Understanding of CyberArk Privileged Cloud, CyberArk EPM, and CrowdStrike

• Ability to troubleshoot CyberArk issues password rotation, CPM failures, session errors

• PowerShell scripting proficiency; experience leveraging APIs for automation

• Ability to create and maintain clear process documentation

• Excellent communication skills prompt follow-up, responsive to chat/email/tickets

• Disciplined approach to operational metrics SLA adherence and timely incident closure

• Education:
• Bachelor's in CS, InfoSec, IT, or related field or equivalent experience.