Senior Systems Engineer - PAM & Identity Automation

EPAM Systems, Inc.; Poland; Remote; PLN 180,000 - 240,000; Full time

Job summary

EPAM Systems, Inc. is seeking a Senior Systems Engineer to drive discovery, design, and remediation of Unix and Windows infrastructure within a centralized PAM platform. The role ensures security controls, governance, and automation across technology teams.

The candidate will lead AD onboarding, PAM integration with BeyondTrust, and credential governance using LAPS, PowerShell, Bash, and Python, collaborating with Infrastructure, Security, and App Support to deliver roadmaps.

Qualifications

• Minimum of 5 years working with Windows and Unix server administration.
• Strong Active Directory design and engineering experience, including GPO development.
• Hands-on experience with PAM platforms, ideally BeyondTrust, along with Microsoft LAPS.
• Skilled in scripting and automation using PowerShell, Bash, and Python.
• Working knowledge of GitLab or comparable CI/CD tools.
• Solid grasp of Windows authentication protocols such as RDP, OpenSSH, and Kerberos.
• Awareness of security principles and privileged access governance standards.
• Practical experience managing infrastructure patching and compliance requirements.

Responsibilities

• Spearhead the discovery and evaluation of server environments and their supporting infrastructure organization-wide
• Determine which operating systems, hosting platforms, and application dependencies fall within project scope
• Evaluate readiness for onboarding, factoring in patch compliance and existing security measures
• Review current authentication methods such as RDP and OpenSSH, identifying secure alternatives to outdated login practices
• Establish Active Directory onboarding frameworks, including OU structures and GPO strategies
• Oversee privileged AD access needs and associated operational workflows
• Lead the integration of Windows systems into PAM tools like BeyondTrust
• Implement credential governance measures, including LAPS and privileged account controls
• Pinpoint applications that require privileged or service account access, correcting any non-compliant setups
• Build automation solutions for domain joins, AD provisioning, and PAM onboarding using Shell, Python, or PowerShell
• Collaborate with Infrastructure, Security, PAM Engineering, and Application Support teams to align efforts
• Create technical documentation, operational guidelines, and implementation roadmaps

Skills

Windows & Unix server administration

Active Directory design

Scripting & automation

Security governance

Privileged access governance

Tools

BeyondTrust

Microsoft LAPS

GitLab

Rundeck

BigFix

Job description

EPAM Systems, Inc. is seeking a Senior Systems Engineer to drive discovery, design, and remediation of Unix and Windows infrastructure within a centralized PAM platform. The role ensures security controls, governance, and automation across technology teams.

The candidate will lead AD onboarding, PAM integration with BeyondTrust, and credential governance using LAPS, PowerShell, Bash, and Python, collaborating with Infrastructure, Security, and App Support to deliver roadmaps.