Senior Systems Administrator / PAM Implementation Engineer

Senior Systems Administrator / PAM Implementation Engineer

Type of Role: Contract (30-day engagement)

Overview

An organization is seeking a Senior Systems Administrator / PAM Implementation Engineer to lead the deployment of CrowdStrike Falcon Privileged Access Management (PAM) across the enterprise. This is a short-term, hands-on engagement covering the design, configuration, integration, testing, documentation, and operational handoff of the platform.

The engineer will work across Infrastructure, Security, Identity, Compliance, and Application teams to inventory privileged accounts, implement least-privilege controls, and eliminate standing administrative access. The role owns both implementation and the transition to day-to-day operations.

Key Responsibilities

• Lead end-to-end implementation of CrowdStrike Falcon Privileged Access.
• Assess existing privileged accounts, administrative groups, service accounts, and elevated access risks.
• Design, configure, test, and deploy Just-In-Time (JIT) access policies, privilege duration controls, and role-based access controls.
• Integrate Falcon PAM with Microsoft Entra ID, Active Directory, and enterprise identity providers.
• Implement Microsoft Teams integrations, PAM browser extensions, approval chains, authorizer groups, and privilege revocation workflows.
• Automate privileged access requests, approvals, provisioning, revocation, and auditing.
• Build dashboards, reporting, monitoring, logging, and alerting, including SIEM integrations where applicable.
• Deliver architecture diagrams, administrative runbooks, and support procedures, and train administrators and support teams through knowledge transfer and operational handoff.

Required Experience & Skills

• Hands-on experience implementing Privileged Access Management (PAM) solutions, preferably CrowdStrike Falcon Privileged Access.
• Strong experience with Microsoft Entra ID / Azure AD and Active Directory.
• Solid background in Identity & Access Management (IAM) and Role-Based Access Control (RBAC).
• Experience with Just-In-Time (JIT) administration and least-privilege models.
• Windows Server administration experience.
• PowerShell scripting and API integration experience.
• Experience building workflow automation for access requests and approvals.
• Microsoft Teams administration experience.
• Experience with security monitoring, auditing, governance, and compliance.
• Ability to produce clear technical documentation and train technical and non-technical teams.
• Ability to work independently and deliver within a 30-day timeline.

Nice to Have

• Experience with other PAM platforms (e.g., CyberArk, BeyondTrust, Delinea).
• Experience integrating with SIEM platforms (e.g., Microsoft Sentinel).
• Experience with CrowdStrike Falcon platform modules beyond PAM.
• Experience in a regulated environment (e.g., healthcare/HIPAA).
• Familiarity with AI-assisted scripting and documentation tools.