Senior Systems Engineer - Unix/Windows

We are looking for a Senior Systems Engineer who will drive the discovery, design, remediation, and integration of Unix and Windows infrastructure within a centralized Privileged Access Management (PAM) platform, while ensuring strong enterprise security controls, operational sustainability, governance, and automation across various technology teams.

Quick Facts

• Hybrid-by-design work model with the opportunity to work remotely within Poland
• Opportunity to work abroad for up to 60 days annually
• Business-driven relocation opportunities
• Open to contractors; B2B cooperation terms are agreed individually

Responsibilities

• Spearhead the discovery and evaluation of server environments and their supporting infrastructure organization-wide
• Determine which operating systems, hosting platforms, and application dependencies fall within project scope
• Evaluate readiness for onboarding, factoring in patch compliance and existing security measures
• Review current authentication methods such as RDP and OpenSSH, identifying secure alternatives to outdated login practices
• Establish Active Directory onboarding frameworks, including OU structures and GPO strategies
• Oversee privileged AD access needs and associated operational workflows
• Lead the integration of Windows systems into PAM tools like BeyondTrust
• Implement credential governance measures, including LAPS and privileged account controls
• Pinpoint applications that require privileged or service account access, correcting any non-compliant setups
• Build automation solutions for domain joins, AD provisioning, and PAM onboarding using Shell, Python, or PowerShell
• Collaborate with Infrastructure, Security, PAM Engineering, and Application Support teams to align efforts
• Create technical documentation, operational guidelines, and implementation roadmaps

Requirements

• Minimum of 5 years working with Windows and Unix server administration
• Solid expertise in Active Directory design and engineering, including GPO development and oversight
• Hands-on experience with PAM platforms, ideally BeyondTrust, along with Microsoft LAPS
• Skilled in scripting and automation using PowerShell, Bash, and Python
• Working knowledge of GitLab or comparable CI/CD tools
• Solid grasp of Windows authentication protocols such as RDP, OpenSSH, and Kerberos
• Awareness of security principles and privileged access governance standards
• Practical experience managing infrastructure patching and compliance requirements

Nice to Have

• Prior exposure to vaulting technologies
• Experience using Rundeck, BigFix, or similar orchestration platforms

Benefits

• Career development programs
• Thought leadership, mentoring, soft-skills, and well-being programs
• Certification opportunities: Anthropic, Gemini, GCP, Azure, AWS
• English classes
• Stable pay
• Participation in the Employee Stock Purchase Plan with a 15% discount
• Benefits package: health insurance, multisport, shopping vouchers
• Referral bonuses up to $2,000
• Offices with entertainment and relaxation zones, table tennis and football, free snacks, coffee, and more
• Corporate, social, and well-being events

Note: Listed benefits are available to employees only. Selected candidates will be contacted exclusively.