Senior Systems Engineer – Unix/Windows

About the role

We are looking for a Senior Systems Engineer who will drive the discovery, design, remediation, and integration of Unix and Windows infrastructure within a centralized Privileged Access Management (PAM) platform, while ensuring strong enterprise security controls, operational sustainability, governance, and automation across various technology teams.

The role offers flexibility to work remotely from anywhere in Kazakhstan or from our offices in Astana, Almaty or Karaganda.

Key responsibilities

• Spearhead discovery and evaluation of server environments and supporting infrastructure organization‑wide.
• Determine operating systems, hosting platforms, and application dependencies that fall within project scope.
• Assess readiness for onboarding, including patch compliance and existing security measures.
• Review and improve authentication methods such as RDP and OpenSSH.
• Establish Active Directory onboarding frameworks, OU structures and GPO strategies.
• Lead integration of Windows systems into PAM tools like BeyondTrust and implement credential governance (LAPS, privileged account controls).
• Build automation solutions for domain joins, AD provisioning and PAM onboarding using Shell, Python or PowerShell.
• Collaborate with Infrastructure, Security, PAM Engineering and Application Support teams to align efforts and produce technical documentation.

Required profile

• Minimum 5 years of experience administering Windows and Unix servers.
• Strong expertise in Active Directory design, GPO development and privileged access governance.
• Hands‑on experience with PAM platforms, preferably BeyondTrust, and Microsoft LAPS.
• Proficiency in scripting and automation using PowerShell, Bash and Python.
• Working knowledge of GitLab or comparable CI/CD tools and Windows authentication protocols (RDP, OpenSSH, Kerberos).

Required skills

• Windows and Unix server administration
• Active Directory design and GPO engineering
• BeyondTrust PAM platform
• Microsoft LAPS
• PowerShell, Bash, Python scripting
• GitLab CI/CD
• RDP, OpenSSH, Kerberos authentication
• Infrastructure patching and compliance management

What we offer

• Flexible remote or hybrid work model across Kazakhstan.
• Opportunities to work abroad for up to two months per year.
• Leadership development, career advising, certifications (GCP, Azure, AWS) and unlimited access to internal learning resources.
• Employee Stock Purchase Plan, monetary referral bonuses, medical & family care package, and housing support program.