ABGi Technology is recruiting on behalf of its client, a large industrial group in the energy sector, for its future Bastion Administration / Privileged Access Security Expert, based in Lyon.

📍 Location: Lyon
🏠 Remote working: 50 %
📅 Start date: 1 January 2027
⏳ Duration: Assignment until 31 December 2027

🔎 YOUR MISSIONS

As part of strengthening the security of its critical digital infrastructure, our client wishes to reinforce its teams with an experienced Bastion Administration Expert, specialised in securing and managing privileged access.

You will work within the digital infrastructure department of a large industrial group, responsible for Cloud, data centre and strategic hosting services platforms.

Your role will be to design, deploy, administer and evolve Bastion administration solutions (PAM - Privileged Access Management) in order to secure access to sensitive resources and guarantee the availability, resilience and compliance of the infrastructure.

You will work in a complex technical environment combining Linux and Windows infrastructure, virtualisation, containerisation, automation and cybersecurity, in collaboration with the architecture, operations, security and production teams.

The missions entrusted to you:

Bastion architecture and design

• Design and document secure, high-performing and scalable Bastion administration architectures;

• Define technical solutions suited to security, availability and scalability requirements;

• Take part in the design of the associated hardware and software architectures;

• Integrate Bastion solutions with existing infrastructure: virtualisation, directories, networks, monitoring tools and security components;

• Ensure the architectures comply with the client's security standards and requirements.

Deployment, integration and administration

• Prepare and validate the technical environments required to deploy the solutions;

• Install, configure and commission Bastion infrastructure;

• Ensure their integration with the various systems and components of the IT environment;

• Carry out the technical, functional and operational qualification phases;

• Administer Bastion infrastructure and ensure its smooth operation;

• Ensure Operational Maintenance (MCO) and Security Maintenance (MCS);

• Support the operations teams during go-lives and stabilisation phases.

Technical developments and version upgrades

• Carry out technical monitoring and analyse developments in the deployed solutions;

• Assess the impact of new versions on production environments and interconnections;

• Prepare and lead upgrade operations;

• Perform performance, stability, compatibility, redundancy and rollback tests;

• Define technical prerequisites and migration procedures;

• Formalise technical recommendations and version upgrade plans;

• Support production updates and verify that they run smoothly.

Resilience, service continuity and monitoring

• Design, maintain and test Disaster Recovery Plan (PRA) arrangements;

• Ensure data consistency and synchronisation between primary and backup infrastructure;

• Define and test failover and rollback scenarios;

• Take part in managing emergency accounts and service continuity procedures;

• Measure and document RTO and RPO recovery indicators;

• Implement and maintain centralised infrastructure monitoring;

• Monitor the performance, availability, capacity and health indicators of systems;

• Define alert thresholds and anticipate risks of service degradation;

• Produce monitoring reports and propose continuous improvement actions.

Documentation and team support

• Write technical architecture files, test plans, operating procedures and acceptance test specifications;

• Produce the technical qualification and validation documents (PTI, PTE);

• Take part in technical workshops, coordination meetings and steering committees;

• Ensure knowledge transfer to internal teams;

• Support operations teams in taking ownership of and evolving the solutions.

🎯 OUR REQUIREMENTS

Essential technical skills:

• Proven expertise in Bastion administration and privileged access management (PAM) solutions;

• Mastery of VMware ESX and virtualisation environments;

• Mastery of Nutanix Prism;

• Solid skills in administering Red Hat Enterprise Linux (RHEL 8, 9 and 10) systems;

• Good command of Windows Server 2019, 2022 and 2025 environments;

• In-depth knowledge of Kubernetes;

• Mastery of OpenShift environments;

• Significant experience in automation with Ansible.

Additional skills and experience expected:

• Expertise in security architecture and privileged access control;

• Experience in designing, deploying and administering secure infrastructure;

• Good understanding of virtualised and hybrid architectures and Cloud / Data centre environments;

• Command of high availability, resilience, MCO, MCS and PRA issues;

• Experience in technical qualification and managing version upgrades;

• Ability to analyse interdependencies between infrastructure, networks, directories, backups and security tools;

• Experience in monitoring, diagnosis and performance optimisation;

• Ability to produce architecture, operations and acceptance documentation;

• Knowledge of collaborative tools Jira, Confluence, Microsoft Teams and Outlook.

Experience in critical industrial environments with high security requirements is a genuine advantage, particularly in the energy, nuclear, critical infrastructure or industrial sectors.

👤 PROFILE SOUGHT

Holding a Bac+3 to Bac+5 qualification in computing, cybersecurity, systems and networks or an equivalent field, you can demonstrate significant experience in the architecture, deployment and administration of Bastion solutions for privileged access.

You have solid technical expertise in systems environments, virtualisation, containerisation and automation.

You are able to work across the full lifecycle of a secure infrastructure, from design through to operation, including the integration, qualification, deployment and evolution phases.

Autonomous, rigorous and methodical, you have excellent analytical and synthesis skills.

Your interpersonal skills allow you to work effectively with a range of contacts: architects, cybersecurity experts, systems administrators, infrastructure teams, production managers and operations teams.

You also know how to pass on your knowledge, support technical teams and contribute to the continuous improvement of infrastructure and security practices.

You wish to put your expertise at the service of a strategic industrial environment, on issues of cybersecurity, privileged access security and the resilience of critical infrastructure.

#LI-ABGI