Senior Systems Engineer – Unix/Windows

About the role

We are seeking a Senior Systems Engineer to lead the discovery, design, remediation, and integration of Unix and Windows infrastructure within a centralized Privileged Access Management (PAM) platform. The role ensures strong security controls, operational sustainability, governance, and automation across multiple technology teams.

Key responsibilities

• Drive discovery and evaluation of server environments and supporting infrastructure organization‑wide.
• Determine operating systems, hosting platforms, and application dependencies in scope.
• Assess onboarding readiness, including patch compliance and existing security measures.
• Review and improve authentication methods such as RDP and OpenSSH.
• Establish Active Directory onboarding frameworks, OU structures, and GPO strategies.
• Manage privileged AD access workflows and integrate Windows systems into PAM tools like BeyondTrust.
• Implement credential governance (LAPS, privileged account controls) and remediate non‑compliant service accounts.
• Develop automation for domain joins, AD provisioning, and PAM onboarding using Shell, Python, or PowerShell.
• Collaborate with Infrastructure, Security, PAM Engineering, and Application Support teams.
• Create technical documentation, operational guidelines, and implementation roadmaps.

Required profile

• Minimum 5 years of Windows and Unix server administration experience.
• Strong expertise in Active Directory design, OU structuring, and GPO development.
• Hands‑on experience with PAM platforms, preferably BeyondTrust, and Microsoft LAPS.
• Proficiency in scripting and automation using PowerShell, Bash, and Python.
• Working knowledge of GitLab or comparable CI/CD tools.
• Solid understanding of Windows authentication protocols (RDP, OpenSSH, Kerberos).
• Awareness of security principles and privileged access governance standards.
• Practical experience managing infrastructure patching and compliance.

Required skills

• Windows Server
• Unix/Linux
• Active Directory
• Group Policy Objects (GPO)
• BeyondTrust PAM
• Microsoft LAPS
• PowerShell
• Bash
• Python
• GitLab / CI‑CD
• RDP, OpenSSH, Kerberos
• Patch management and compliance

What we offer

• Remote work from anywhere in Georgia (home, office in Tbilisi or Batumi, or coworking space in Kutaisi).
• Opportunity to work abroad up to two months per year.
• Relocation possibilities across 55+ countries.
• Corporate and social events, leadership development, career advising, and well‑being programs.
• Support for certifications (GCP, Azure, AWS) and unlimited access to internal learning resources.