Senior Systems Engineer - Unix/Windows

We are looking for a Senior Systems Engineer who will drive the discovery, design, remediation, and integration of Unix and Windows infrastructure within a centralized Privileged Access Management (PAM) platform, while ensuring strong enterprise security controls, operational sustainability, governance, and automation across various technology teams.

Responsibilities

• Spearhead the discovery and evaluation of server environments and their supporting infrastructure organization-wide
• Determine which operating systems, hosting platforms, and application dependencies fall within project scope
• Evaluate readiness for onboarding, factoring in patch compliance and existing security measures
• Review current authentication methods such as RDP and OpenSSH, identifying secure alternatives to outdated login practices
• Establish Active Directory onboarding frameworks, including OU structures and GPO strategies
• Oversee privileged AD access needs and associated operational workflows
• Lead the integration of Windows systems into PAM tools like BeyondTrust
• Implement credential governance measures, including LAPS and privileged account controls
• Pinpoint applications that require privileged or service account access, correcting any non-compliant setups
• Build automation solutions for domain joins, AD provisioning, and PAM onboarding using Shell, Python, or PowerShell
• Collaborate with Infrastructure, Security, PAM Engineering, and Application Support teams to align efforts
• Create technical documentation, operational guidelines, and implementation roadmaps

Requirements

• Minimum of 5 years working with Windows and Unix server administration
• Solid expertise in Active Directory design and engineering, including GPO development and oversight
• Hands-on experience with PAM platforms, ideally BeyondTrust, along with Microsoft LAPS
• Skilled in scripting and automation using PowerShell, Bash, and Python
• Working knowledge of GitLab or comparable CI/CD tools
• Solid grasp of Windows authentication protocols such as RDP, OpenSSH, and Kerberos
• Awareness of security principles and privileged access governance standards
• Practical experience managing infrastructure patching and compliance requirements

Nice to have

• Prior exposure to vaulting technologies
• Experience using Rundeck, BigFix, or similar orchestration platforms

We offer

We gather like-minded people:

• Top tech minds driving innovation in AI, cloud and digital platform modernization
• Supportive team and agile, startup-like culture
• Hybrid by design mode and opportunity to work remotely within Poland
• Chance to work abroad for up to 60 days annually
• Business-driven relocation opportunities

We provide growth opportunities:

• Career development programs
• Thought leadership, mentoring, soft skills and well-being programs
• Certification (Anthropic, Gemini, GCP, Azure, AWS)
• English classes

We cover it all:

• Stable pay
• Participation in the Employee Stock Purchase Plan with a 15% discount
• Benefits package (health insurance, multisport, shopping vouchers)
• Referral bonuses up to $2,000
• Offices featuring entertainment and relaxation zones, table tennis and football, free snacks, coffee and more
• Corporate, social and well-being events

Please note

• Benefits listed above are available to employees only.
• Contractors are welcome; terms of B2B cooperation agreements are agreed individually.
• Only selected candidates will be contacted.