Lead Systems Engineer - Unix/Windows

We are seeking a Lead Systems Engineer to lead the discovery, design, remediation, and onboarding of Unix and Windows infrastructure into a centralized Privileged Access Management (PAM) platform, ensuring enterprise security controls, sustainable operational processes, governance, and automation capabilities across multiple technology teams.

Responsibilities

• Lead discovery and assessment of server estates across the organization and supporting infrastructure
• Define in-scope operating systems, hosting platforms, and application dependencies
• Assess onboarding readiness, including patch compliance and security controls
• Evaluate authentication approaches, including RDP and OpenSSH, and identify compliant alternatives to legacy login methods
• Design and implement Active Directory onboarding standards, OU structures, and GPO strategy
• Manage privileged AD access requirements and operational processes
• Drive onboarding of Windows systems into PAM solutions such as BeyondTrust
• Integrate credential governance controls including LAPS and privileged account management
• Identify applications requiring privileged or service account access and remediate non-compliant configurations
• Develop automation for domain joins, AD provisioning, and PAM onboarding workflows using Shell, Python, or PowerShell
• Coordinate activities across Infrastructure, Security, PAM Engineering, and Application Support teams
• Produce technical designs, operational procedures, and implementation plans

Requirements

• 7+ years of experience in Windows and Unix Server administration
• Strong background in Active Directory architecture and engineering, including Group Policy (GPO) design and management
• Experience with Privileged Access Management platforms, preferably BeyondTrust, and Microsoft LAPS
• Proficiency in PowerShell, Bash, and Python scripting and automation
• Familiarity with Gitlab or similar CI/CD tooling
• Understanding of Windows authentication technologies including RDP, OpenSSH, and Kerberos
• Knowledge of security and privileged access governance principles
• Experience in infrastructure patching and compliance management
• English proficiency at B2 level or higher

Nice to have

• Background in vaulting technologies
• Familiarity with Rundeck, BigFix, or similar orchestration tooling

Benefits

• Engineering Heritage: Best-in-class experts sharing a culture of engineering excellence and tackling complex engineering challenges for over 30 years
• Advanced Tech Stack: Innovative projects where you can apply or enhance your expertise in Cloud, Data, AI, and other emerging technologies
• World-Class Clients: Work closely with 340+ of the Forbes Global 2000 on creating disruptive solutions that make a global impact
• Professional Growth: Exceptional support for career development with comprehensive resources for upskilling or reskilling in pioneering practices
• GenAI Community: Strong AI competencies with 600+ experts across 55+ locations driving GenAI-enabled transformation journeys
• Entrepreneurial Culture: If you're passionate and dedicated to improving business transformation, we provide the support you need to bring your ideas to life
• Hybrid Setup: The flexibility to work from any location in Lithuania, whether it's your home or our dynamic offices in Vilnius and Kaunas
• Other Benefits: Additional vacation and trust days, private health insurance, Employee Stock Purchase Plan and more