Senior Systems Engineer – Unix/Windows

About the role

We are seeking a Senior Systems Engineer to lead the discovery, design, remediation, and integration of Unix and Windows infrastructure within a centralized Privileged Access Management (PAM) platform. The role is fully remote, allowing you to work from anywhere in Armenia while collaborating with cross‑functional technology teams.

Key responsibilities

• Drive discovery and evaluation of server environments and supporting infrastructure across the organization.
• Determine scope of operating systems, hosting platforms, and application dependencies.
• Assess readiness for onboarding, including patch compliance and security posture.
• Review and modernize authentication methods such as RDP and OpenSSH.
• Design Active Directory onboarding frameworks, OU structures, and GPO strategies.
• Manage privileged AD access workflows and integrate Windows systems into PAM tools like BeyondTrust.
• Implement credential governance measures, including LAPS and privileged account controls.
• Automate domain joins, AD provisioning, and PAM onboarding using Shell, Python, or PowerShell.
• Collaborate with Infrastructure, Security, PAM Engineering, and Application Support teams.
• Create technical documentation, operational guidelines, and implementation roadmaps.

Required profile

• Minimum 5 years of experience in Windows and Unix server administration.
• Strong expertise in Active Directory design, GPO development, and management.
• Hands‑on experience with PAM platforms, preferably BeyondTrust, and Microsoft LAPS.
• Proven ability to script and automate tasks using PowerShell, Bash, and Python.
• Familiarity with GitLab or comparable CI/CD tools.
• Solid understanding of Windows authentication protocols (RDP, OpenSSH, Kerberos).
• Knowledge of security principles and privileged access governance.

Required skills

• Windows Server
• Unix/Linux
• Active Directory
• Group Policy Objects (GPO)
• BeyondTrust PAM
• Microsoft LAPS
• PowerShell
• Bash
• Python
• GitLab / CI‑CD
• RDP, OpenSSH, Kerberos
• Patch management and compliance
• Vaulting technologies (nice to have)
• Rundeck, BigFix or similar orchestration tools (nice to have)

What we offer

• Fully remote work with flexibility to operate from any location in Armenia.
• Opportunities to work abroad for up to two months per year.
• Access to global projects and industry‑leading clients.
• Leadership development, career advising, and well‑being programs.
• Support for certifications in GCP, Azure, AWS and other technologies.
• Corporate and social events across 55+ countries.