Lead Systems Engineer – Unix/Windows

About the role

We are looking for a Lead Systems Engineer to drive the discovery, design, remediation, and onboarding of Unix and Windows infrastructure into a centralized Privileged Access Management (PAM) platform. The role ensures enterprise‑wide security controls, sustainable operations, governance and automation across multiple technology teams.

Key responsibilities

• Lead discovery and assessment of server estates and supporting infrastructure.
• Define in‑scope operating systems, hosting platforms and application dependencies.
• Assess onboarding readiness, including patch compliance and security controls.
• Evaluate authentication methods (RDP, OpenSSH) and recommend compliant alternatives.
• Design and implement Active Directory onboarding standards, OU structures and GPO strategy.
• Manage privileged AD access processes and drive Windows onboarding to PAM solutions such as BeyondTrust.
• Integrate credential governance controls (LAPS, privileged account management).
• Develop automation for domain joins, AD provisioning and PAM onboarding using Shell, Python or PowerShell.
• Coordinate activities across Infrastructure, Security, PAM Engineering and Application Support teams.
• Produce technical designs, operational procedures and implementation plans.

Required profile

• 7+ years of experience in Windows and Unix server administration.
• Strong background in Active Directory architecture, Group Policy design and management.
• Experience with Privileged Access Management platforms, preferably BeyondTrust, and Microsoft LAPS.
• Proficiency in PowerShell, Bash and Python scripting.
• Familiarity with Gitlab or similar CI/CD tooling.
• Understanding of Windows authentication technologies (RDP, OpenSSH, Kerberos).
• Knowledge of security and privileged access governance principles.
• English proficiency at B2 level or higher.

Required skills

• Windows Server
• Unix Server
• Active Directory
• Group Policy (GPO)
• BeyondTrust PAM
• Microsoft LAPS
• PowerShell
• Bash
• Python
• Gitlab CI/CD
• RDP
• OpenSSH
• Kerberos
• Vaulting technologies (nice to have)
• Rundeck, BigFix (nice to have)

What we offer

• Engineering heritage with 30+ years of expertise.
• Access to innovative projects in Cloud, Data, AI and emerging technologies.
• Opportunity to work with world‑class clients from the Forbes Global 2000.
• Strong support for professional growth and upskilling.
• Participation in a vibrant GenAI community of 600+ experts.