Senior Systems Engineer - Unix/Windows

EPAM Systems; Województwo pomorskie; Hybrid; PLN 180,000 - 260,000; Full time

Benefits offered by this job

Hybrid work model

Remote within Poland

Relocation opportunities

Employee stock purchase plan

Health insurance

Multisport

Job summary

EPAM Systems is seeking a Senior Systems Engineer to drive discovery, design, remediation, and integration of Unix and Windows infrastructure within a centralized PAM platform. You will ensure enterprise security controls, governance, and automation across technology teams.

You will spearhead evaluation of server environments, onboard frameworks, and privileged access workflows, collaborating with multiple teams to implement adoptions and provide documentation and roadmaps for projects.

Qualifications

• Minimum of 5 years working with Windows and Unix server administration.
• Solid expertise in Active Directory design and engineering, including GPO development and oversight.
• Hands-on experience with PAM platforms, ideally BeyondTrust, along with Microsoft LAPS.
• Scripting and automation using PowerShell, Bash, and Python.
• Working knowledge of GitLab or comparable CI/CD tools.
• Solid grasp of Windows authentication protocols such as RDP, OpenSSH, and Kerberos.
• Awareness of security principles and privileged access governance standards.
• Practical experience managing infrastructure patching and compliance requirements.

Responsibilities

• Spearhead discovery and evaluation of server environments and infrastructure.
• Determine OS, hosting platforms and dependencies within project scope.
• Evaluate onboarding readiness with patch and security measures.
• Review authentication methods and identify secure alternatives to outdated logins.
• Establish AD onboarding frameworks including OU structures and GPO strategies.
• Oversee privileged AD access needs and related workflows.
• Lead Windows system integration into PAM tools like BeyondTrust.
• Implement credential governance measures including LAPS and privileged accounts.
• Identify apps needing privileged or service account access and fix non-compliant setups.
• Build automation for domain joins, AD provisioning and PAM onboarding using Shell, PowerShell or Python.
• Collaborate with Infrastructure, Security, PAM Engineering, and Application Support teams.
• Create technical documentation, operational guidelines, and implementation roadmaps.

Skills

Windows/Unix admin

AD design

PAM platforms

PowerShell

Bash

Python

GitLab CI/CD

RDP/OpenSSH/Kerberos

Security governance

Tools

BeyondTrust

Job description

We are looking for a Senior Systems Engineer who will drive the discovery, design, remediation, and integration of Unix and Windows infrastructure within a centralized Privileged Access Management (PAM) platform, while ensuring strong enterprise security controls, operational sustainability, governance, and automation across various technology teams.

Responsibilities

• Spearhead the discovery and evaluation of server environments and their supporting infrastructure organization-wide
• Determine which operating systems, hosting platforms, and application dependencies fall within project scope
• Evaluate readiness for onboarding, factoring in patch compliance and existing security measures
• Review current authentication methods such as RDP and OpenSSH, identifying secure alternatives to outdated login practices
• Establish Active Directory onboarding frameworks, including OU structures and GPO strategies
• Oversee privileged AD access needs and associated operational workflows
• Lead the integration of Windows systems into PAM tools like BeyondTrust
• Implement credential governance measures, including LAPS and privileged account controls
• Pinpoint applications that require privileged or service account access, correcting any non-compliant setups
• Build automation solutions for domain joins, AD provisioning, and PAM onboarding using Shell, Python, or PowerShell
• Collaborate with Infrastructure, Security, PAM Engineering, and Application Support teams to align efforts
• Create technical documentation, operational guidelines, and implementation roadmaps

Requirements

• Minimum of 5 years working with Windows and Unix server administration
• Solid expertise in Active Directory design and engineering, including GPO development and oversight
• Hands-on experience with PAM platforms, ideally BeyondTrust, along with Microsoft LAPS
• Skilled in scripting and automation using PowerShell, Bash, and Python
• Working knowledge of GitLab or comparable CI/CD tools
• Solid grasp of Windows authentication protocols such as RDP, OpenSSH, and Kerberos
• Awareness of security principles and privileged access governance standards
• Practical experience managing infrastructure patching and compliance requirements

Nice to have

• Prior exposure to vaulting technologies
• Experience using Rundeck, BigFix, or similar orchestration platforms

We offer

• We gather like-minded people:
• Top tech minds driving innovation in AI, cloud and digital platform modernization
• Supportive team and agile, startup-like culture
• Hybrid by design mode and opportunity to work remotely within Poland
• Chance to work abroad for up to 60 days annually
• Business-driven relocation opportunities
• We provide growth opportunities:
• Career development programs
• Thought leadership, mentoring, soft skills and well-being programs
• Certification (Anthropic, Gemini, GCP, Azure, AWS)
• English classes
• We cover it all:
• Stable pay
• Participation in the Employee Stock Purchase Plan with a 15% discount
• Benefits package (health insurance, multisport, shopping vouchers)
• Referral bonuses up to $2,000
• Offices featuring entertainment and relaxation zones, table tennis and football, free snacks, coffee and more
• Corporate, social and well-being events

Please, note:

• Benefits listed above are available to employees only
• We are open for working with Contractors. Terms of B2B cooperation agreements are agreed individually
• We will reach out to selected candidates exclusively

EPAM is global leader in AI transformation engineering and integrated consulting, serving Forbes Global 2000 companies and ambitious startups. With over thirty years of expertise in custom software, product and platform engineering, we empower our clients to become AI-Native enterprises, driving measurable value from innovation and digital investments.