Back to SearchLead Systems Engineer - Unix/Windows
Remote in Republic of Lithuania
Infrastructure Automation and Orchestration& 11 others
Looking for something else?
Find a vacancy that works for you. Send us your CV to receive a personalized offer.
Find me a job
We are seeking a Lead Systems Engineer to lead the discovery, design, remediation, and onboarding of Unix and Windows infrastructure into a centralized Privileged Access Management (PAM) platform, ensuring enterprise security controls, sustainable operational processes, governance, and automation capabilities across multiple technology teams.
Responsibilities
- Lead discovery and assessment of server estates across the organization and supporting infrastructure
- Define in-scope operating systems, hosting platforms, and application dependencies
- Assess onboarding readiness, including patch compliance and security controls
- Evaluate authentication approaches, including RDP and OpenSSH, and identify compliant alternatives to legacy login methods
- Design and implement Active Directory onboarding standards, OU structures, and GPO strategy
- Manage privileged AD access requirements and operational processes
- Drive onboarding of Windows systems into PAM solutions such as BeyondTrust
- Integrate credential governance controls including LAPS and privileged account management
- Identify applications requiring privileged or service account access and remediate non-compliant configurations
- Develop automation for domain joins, AD provisioning, and PAM onboarding workflows using Shell, Python, or PowerShell
- Coordinate activities across Infrastructure, Security, PAM Engineering, and Application Support teams
- Produce technical designs, operational procedures, and implementation plans
Requirements
- 7+ years of experience in Windows and Unix Server administration
- Strong background in Active Directory architecture and engineering, including Group Policy (GPO) design and management
- Experience with Privileged Access Management platforms, preferably BeyondTrust, and Microsoft LAPS
- Proficiency in PowerShell, Bash, and Python scripting and automation
- Familiarity with Gitlab or similar CI/CD tooling
- Understanding of Windows authentication technologies including RDP, OpenSSH, and Kerberos
- Knowledge of security and privileged access governance principles
- Experience in infrastructure patching and compliance management
- English proficiency at B2 level or higher
Nice to have
- Background in vaulting technologies
- Familiarity with Rundeck, BigFix, or similar orchestration tooling