Senior Systems Engineer - Unix/Windows

We are looking for aSenior Systems Engineer who will drive the discovery, design, remediation, and integration of Unix and Windows infrastructure within a centralized Privileged Access Management (PAM) platform, while ensuring strong enterprise security controls, operational sustainability, governance, and automation across various technology teams.

Responsibilities

• Spearhead the discovery and evaluation of server environments and their supporting infrastructure organization-wide
• Determine which operating systems, hosting platforms, and application dependencies fall within project scope
• Evaluate readiness for onboarding, factoring in patch compliance and existing security measures
• Review current authentication methods such as RDP and OpenSSH, identifying secure alternatives to outdated login practices
• Establish Active Directory onboarding frameworks, including OU structures and GPO strategies
• Oversee privileged AD access needs and associated operational workflows
• Lead the integration of Windows systems into PAM tools like BeyondTrust
• Implement credential governance measures, including LAPS and privileged account controls
• Pinpoint applications that require privileged or service account access, correcting any non-compliant setups
• Build automation solutions for domain joins, AD provisioning, and PAM onboarding using Shell, Python, or PowerShell
• Collaborate with Infrastructure, Security, PAM Engineering, and Application Support teams to align efforts
• Create technical documentation, operational guidelines, and implementation roadmaps

Requirements

• Minimum of 5 years working with Windows and Unix server administration
• Solid expertise in Active Directory design and engineering, including GPO development and oversight
• Hands-on experience with PAM platforms, ideally BeyondTrust, along with Microsoft LAPS
• Skilled in scripting and automation using PowerShell, Bash, and Python
• Working knowledge of GitLab or comparable CI/CD tools
• Solid grasp of Windows authentication protocols such as RDP, OpenSSH, and Kerberos
• Awareness of security principles and privileged access governance standards
• Practical experience managing infrastructure patching and compliance requirements

Nice to have

• Prior exposure to vaulting technologies
• Experience using Rundeck, BigFix, or similar orchestration platforms