Lead Systems Engineer - Unix/Windows

We are seeking aLead Systems Engineer to lead the discovery, design, remediation, and onboarding of Unix and Windows infrastructure into a centralized Privileged Access Management (PAM) platform, ensuring enterprise security controls, sustainable operational processes, governance, and automation capabilities across multiple technology teams.

Responsibilities

• Lead discovery and assessment of server estates across the organization and supporting infrastructure
• Define in-scope operating systems, hosting platforms, and application dependencies
• Assess onboarding readiness, including patch compliance and security controls
• Evaluate authentication approaches, including RDP and OpenSSH, and identify compliant alternatives to legacy login methods
• Design and implement Active Directory onboarding standards, OU structures, and GPO strategy
• Manage privileged AD access requirements and operational processes
• Drive onboarding of Windows systems into PAM solutions such as BeyondTrust
• Integrate credential governance controls including LAPS and privileged account management
• Identify applications requiring privileged or service account access and remediate non-compliant configurations
• Develop automation for domain joins, AD provisioning, and PAM onboarding workflows using Shell, Python, or PowerShell
• Coordinate activities across Infrastructure, Security, PAM Engineering, and Application Support teams
• Produce technical designs, operational procedures, and implementation plans

Requirements

• 7+ years of experience in Windows and Unix Server administration
• Strong background in Active Directory architecture and engineering, including Group Policy (GPO) design and management
• Experience with Privileged Access Management platforms, preferably BeyondTrust, and Microsoft LAPS
• Proficiency in PowerShell, Bash, and Python scripting and automation
• Familiarity with Gitlab or similar CI/CD tooling
• Understanding of Windows authentication technologies including RDP, OpenSSH, and Kerberos
• Knowledge of security and privileged access governance principles
• Experience in infrastructure patching and compliance management
• English proficiency at B2 level or higher

Nice to have

• Background in vaulting technologies
• Familiarity with Rundeck, BigFix, or similar orchestration tooling