Senior Systems Engineer - Unix/Windows

EPAM Systems; Poland; Hybrid; PLN 180,000 - 280,000; Full time

Benefits offered by this job

Health insurance

Multisport

Shopping vouchers

Employee Stock Purchase Plan 15% off

Job summary

EPAM Systems is seeking a Senior Systems Engineer to drive discovery, design, remediation and integration of Unix and Windows infrastructure within a centralized PAM platform. You will ensure strong security controls, governance and automation across technology teams in Poland.

Responsibilities include evaluating server environments, onboarding readiness, AD framework design, PAM integration (BeyondTrust) and credential governance with LAPS.

Qualifications

• 5+ years of Windows and Unix server administration experience.
• Strong expertise in Active Directory design and GPO development and oversight.
• Hands-on experience with PAM platforms (BeyondTrust) and Microsoft LAPS.
• Scripting and automation skills in PowerShell, Bash, and Python.
• Working knowledge of GitLab or similar CI/CD tools.
• Solid understanding of Windows authentication protocols (RDP, OpenSSH, Kerberos).
• Awareness of security principles and privileged access governance standards.
• Experience with infrastructure patching and compliance.

Responsibilities

• Spearhead discovery and evaluation of server environments and supporting infrastructure.
• Determine OS, hosting platforms, and application dependencies within project scope.
• Evaluate onboarding readiness considering patch compliance and security measures.
• Review authentication methods (RDP, OpenSSH) and identify secure alternatives.
• Establish AD onboarding frameworks including OU structures and GPO strategies.
• Oversee privileged AD access needs and related workflows.
• Lead Windows system integration into PAM tools like BeyondTrust.
• Implement credential governance measures including LAPS and privileged accounts controls.
• Identify apps requiring privileged or service accounts and correct non-compliant setups.
• Build automation for domain joins, AD provisioning, and PAM onboarding using Shell/PowerShell/Python.
• Collaborate with Infrastructure, Security, PAM Engineering, and Application Support teams.
• Create technical documentation, operational guidelines, and implementation roadmaps.

Skills

Windows Admin

Unix Admin

Active Directory design

BeyondTrust PAM

PowerShell

Bash

Python

RDP

OpenSSH

Kerberos

Privileged access governance

Patching/compliance

Tools

BeyondTrust

LAPS

GitLab

Rundeck

BigFix

Job description

We are looking for a Senior Systems Engineer who will drive the discovery, design, remediation, and integration of Unix and Windows infrastructure within a centralized Privileged Access Management (PAM) platform, while ensuring strong enterprise security controls, operational sustainability, governance, and automation across various technology teams.

Responsibilities

• Spearhead the discovery and evaluation of server environments and their supporting infrastructure organization-wide
• Determine which operating systems, hosting platforms, and application dependencies fall within project scope
• Evaluate readiness for onboarding, factoring in patch compliance and existing security measures
• Review current authentication methods such as RDP and OpenSSH, identifying secure alternatives to outdated login practices
• Establish Active Directory onboarding frameworks, including OU structures and GPO strategies
• Oversee privileged AD access needs and associated operational workflows
• Lead the integration of Windows systems into PAM tools like BeyondTrust
• Implement credential governance measures, including LAPS and privileged account controls
• Pinpoint applications that require privileged or service account access, correcting any non-compliant setups
• Build automation solutions for domain joins, AD provisioning, and PAM onboarding using Shell, Python, or PowerShell
• Collaborate with Infrastructure, Security, PAM Engineering, and Application Support teams to align efforts
• Create technical documentation, operational guidelines, and implementation roadmaps

Requirements

• Minimum of 5 years working with Windows and Unix server administration
• Solid expertise in Active Directory design and engineering, including GPO development and oversight
• Hands-on experience with PAM platforms, ideally BeyondTrust, along with Microsoft LAPS
• Skilled in scripting and automation using PowerShell, Bash, and Python
• Working knowledge of GitLab or comparable CI/CD tools
• Solid grasp of Windows authentication protocols such as RDP, OpenSSH, and Kerberos
• Awareness of security principles and privileged access governance standards
• Practical experience managing infrastructure patching and compliance requirements

Nice to have

• Prior exposure to vaulting technologies
• Experience using Rundeck, BigFix, or similar orchestration platforms

We offer

• We gather like-minded people:
  • Top tech minds driving innovation in AI, cloud and digital platform modernization
  • Supportive team and agile, startup-like culture
  • Hybrid by design mode and opportunity to work remotely within Poland
  • Chance to work abroad for up to 60 days annually
  • Business-driven relocation opportunities
• We provide growth opportunities:
  • Career development programs
  • Thought leadership, mentoring, soft skills and well-being programs
  • Certification (Anthropic, Gemini, GCP, Azure, AWS)
  • English classes
• We cover it all:
  • Stable pay
  • Participation in the Employee Stock Purchase Plan with a 15% discount
  • Benefits package (health insurance, multisport, shopping vouchers)
  • Referral bonuses up to $2,000
  • Offices featuring entertainment and relaxation zones, table tennis and football, free snacks, coffee and more
  • Corporate, social and well-being events
• Please, note:
  • Benefits listed above are available to employees only
  • We are open for working with Contractors. Terms of B2B cooperation agreements are agreed individually
  • We will reach out to selected candidates exclusively

EPAM is global leader in AI transformation engineering and integrated consulting, serving Forbes Global 2000 companies and ambitious startups. With over thirty years of expertise in custom software, product and platform engineering, we empower our clients to become AI-Native enterprises, driving measurable value from innovation and digital investments.