IT Systems Administrator IV #26-23185

Duration: 4-month contract with possibility of extension and conversion
 
Job Description

• Our Client, a leading Canadian financial services organization, is seeking a senior Systems Administrator (Level IV) to join its enterprise Security Tools & Network Operations team in Mississauga on a 4-month contract, with extension and conversion to permanent both possible.

• You will be covering a leave on a tight-knit five-person team that keeps mission-critical privileged-access and security tooling – anchored on CyberArk – healthy, available and compliant.

• Day to day, you will troubleshoot and resolve production incidents across infrastructure systems and security applications, deliver CyberArk projects (account onboarding, platform and policy changes, upgrades) alongside the engineering team, and act as a subject-matter expert on technology controls, security and risk.

• This is an excellent opportunity for a hands-on CyberArk administrator with a broad systems-administration foundation to work with a modern PAM / IAM stack – CyberArk, RSA SecurID, Hashi Corp Vault, Microsoft Entra (Azure AD) MFA / Conditional Access, Quest Change Auditor and CA Control Minder – inside a large, regulated enterprise.

Experience:

• 5 to 7 years of overall IT / systems administration experience, including hands-on CyberArk administration

 Responsibilities
Incident & Production Support

• Monitor and resolve incidents related to infrastructure systems and security applications, with a primary focus on the CyberArk privileged access platform.

• Initiate corrective actions to resolve system and infrastructure application errors within agreed service levels.

• Log and document production problems, identify recurring issues and recommend and implement preventative measures.

• Answer calls from application support groups and systems engineers; identify problems and resolve or escalate as required.

• Interact with systems programmers and server, database and network support staff to maintain a responsive and available infrastructure.

 CyberArk & Security Tools Administration

• Administer and support the CyberArk environment – vault health, CPM password management and reconciliation, PVWA, PSM / PSMP session management, safes, platforms and policies.

• Deliver CyberArk projects and enhancements: privileged account onboarding, platform and policy changes, component upgrades and patching.

• Support adjacent security tooling such as RSA SecurID, Hashi Corp Vault, Microsoft Entra MFA / Conditional Access, Quest Change Auditor and CA Control Minder.

• Work with the engineering team on design reviews, change implementation and validation in lower and production environments.

• Maintain operational runbooks, knowledge-base articles and configuration documentation.

 Controls, Risk & Subject-Matter Expertise

• Apply sound-to-advanced knowledge of business, technology controls, security and risk to daily operations and change activity.

• Serve as a subject-matter expert on business-specific, cross-functional and enterprise initiatives.

• Participate in projects of moderate to high complexity and provide complex reporting, analysis and assessments at the functional, business-line or enterprise level.

• Support audit and compliance requests with accurate evidence and access reporting.

• Communicate incident status, root cause and remediation clearly to technical and non-technical stakeholders.

 Required Skillsets

• Systems Administration: 5–7 years administering enterprise Windows and/or UNIX-Linux server environments – builds, patching, access, performance and availability.

• CyberArk Privileged Access Management: Hands-on administration of CyberArk (Vault, CPM, PVWA, PSM) including troubleshooting, account onboarding and project delivery.

• Incident & Problem Management: Proven ability to diagnose and resolve production incidents, perform root-cause analysis and drive permanent fixes within an ITIL framework.

• Security, Controls & Risk: Sound-to-advanced understanding of technology controls, security and risk in a regulated enterprise; ability to support audit evidence requests.

• Platforms: Strong general IT knowledge spanning Windows Server, UNIX / Linux, Active Directory, networking fundamentals and databases at a support level.

• Scripting & Automation: Shell scripting (bash / ksh) and/or PowerShell for diagnostics, reporting and routine task automation.

• Monitoring & Diagnostics: Experience with enterprise monitoring and diagnostic tooling and log analysis to isolate faults quickly.

• Project Participation: Demonstrated ability to contribute to projects of moderate-to-high complexity and deliver assigned work packages on time.

• Communication: Strong written and verbal communication; able to explain technical issues to engineers, application owners and management.

• Teamwork: Collaborative operator who works effectively as part of a small team and with a partner engineering team.

 Preferred Skillsets

• RSA SecurID (Authentication Manager, token and agent administration).

• Hashi Corp Vault / secrets management (policies, auth methods, secret engines).

• Microsoft Entra ID (Azure AD) Multi-Factor Authentication and Conditional Access policy administration.

• Quest Change Auditor for Active Directory / file-system change auditing and reporting.

• CA Control Minder (Symantec / Broadcom Privileged Access Manager) or another host-based PAM solution.

• UNIX systems management on AIX and/or HP-UX, with support and diagnostic tools such as OpenView or VERITAS; exposure to multiple UNIX-based operating systems.

• Information Security certification or accreditation (CyberArk Defender / Sentry, CISSP, CISM, CompTIA Security+).

• University degree in a technology-related discipline.

• Prior experience in financial services or another highly regulated, large-enterprise environment.

 Education:

• University degree in Computer Science, Information Technology, Engineering or a related field is a nice-to-have; equivalent experience considered

Certifications:

•  Information Security certification / accreditation an asset (e.g., CyberArk Defender or Sentry, CISSP, CISM, CompTIA Security+)

Shift:

•  Hybrid (3 days per week onsite, 2 days remote)

About US Tech Solutions: US Tech Solutions is a global staff augmentation firm providing a wide range of talent on-demand and total workforce solutions. To know more about US Tech Solutions, please visit

Equal Opportunity Employer: All qualified applicants will receive consideration for employment without regard to race, colour, religion, sex, sexual orientation, gender identity, national origin, disability, or status as a protected veteran.

AI Statement: By applying, you acknowledge that AI-assisted tools may be used during the recruitment process.

#LI-AS140