Senior Systems Engineer - Unix/Windows

We are looking for a Senior Systems Engineer who will drive the discovery, design, remediation, and integration of Unix and Windows infrastructure within a centralized Privileged Access Management (PAM) platform, while ensuring strong enterprise security controls, operational sustainability, governance, and automation across various technology teams.

Responsibilities

• Spearhead the discovery and evaluation of server environments and their supporting infrastructure organization-wide
• Determine which operating systems, hosting platforms, and application dependencies fall within project scope
• Evaluate readiness for onboarding, factoring in patch compliance and existing security measures
• Review current authentication methods such as RDP and OpenSSH, identifying secure alternatives to outdated login practices
• Establish Active Directory onboarding frameworks, including OU structures and GPO strategies
• Oversee privileged AD access needs and associated operational workflows
• Lead the integration of Windows systems into PAM tools like BeyondTrust
• Implement credential governance measures, including LAPS and privileged account controls
• Pinpoint applications that require privileged or service account access, correcting any non-compliant setups
• Build automation solutions for domain joins, AD provisioning, and PAM onboarding using Shell, Python, or PowerShell
• Collaborate with Infrastructure, Security, PAM Engineering, and Application Support teams to align efforts
• Create technical documentation, operational guidelines, and implementation roadmaps

Requirements

• Minimum of 5 years working with Windows and Unix server administration
• Solid expertise in Active Directory design and engineering, including GPO development and oversight
• Hands-on experience with PAM platforms, ideally BeyondTrust, along with Microsoft LAPS
• Skilled in scripting and automation using PowerShell, Bash, and Python
• Working knowledge of GitLab or comparable CI/CD tools
• Solid grasp of Windows authentication protocols such as RDP, OpenSSH, and Kerberos
• Awareness of security principles and privileged access governance standards
• Practical experience managing infrastructure patching and compliance requirements

Nice to have

• Prior exposure to vaulting technologies
• Experience using Rundeck, BigFix, or similar orchestration platforms

We offer

• We gather like-minded people:
• • Top tech minds driving innovation in AI, cloud and digital platform modernization
    • Supportive team and agile, startup-like culture
    • Hybrid by design mode and opportunity to work remotely within Poland
    • Chance to work abroad for up to 60 days annually
    • Business-driven relocation opportunities
• We provide growth opportunities:
• • Career development programs
    • Thought leadership, mentoring, soft skills and well-being programs
    • Certification (Anthropic, Gemini, GCP, Azure, AWS)
    • English classes
• We cover it all:
• • Stable pay
    • Participation in the Employee Stock Purchase Plan with a 15% discount
    • Benefits package (health insurance, multisport, shopping vouchers)
    • Referral bonuses up to $2,000
    • Offices featuring entertainment and relaxation zones, table tennis and football, free snacks, coffee and more
    • Corporate, social and well-being events
• Please, note:
• • Benefits listed above are available to employees only
    • We are open for working with Contractors. Terms of B2B cooperation agreements are agreed individually
    • We will reach out to selected candidates exclusively

EPAM is global leader in AI transformation engineering and integrated consulting, serving Forbes Global 2000 companies and ambitious startups. With over thirty years of expertise in custom software, product and platform engineering, we empower our clients to become AI-Native enterprises, driving measurable value from innovation and digital investments.