Windows Server Engineer

Position Overview:
We are seeking a skilled and driven Windows Server Engineer to support our global server infrastructure. The ideal candidate will have strong hands-on experience in Windows Server administration, Active Directory, and enterprise patch management, and will work closely with engineering leads in the US to maintain high availability, security compliance, and operational excellence across server fleet.
JOB RESPONSIBILITIES
Duties & Responsibilities: Windows Server Administration (40%)
• Administer, maintain, and troubleshoot Windows Server environments (2016/2019/2022) across on-premises and cloud infrastructure.
• Manage virtual machine provisioning and lifecycle across VMware, Nutanix AHV, and public cloud environments (GCP and AWS).
• Support server build standards, base images, and configuration management processes.
• Perform root cause analysis on server incidents and implement corrective actions.
Active Directory & Identity Services (20%)
• Administer and maintain Active Directory, DNS, DHCP, and Group Policy across the enterprise domain.
• Manage user and service accounts, OU structures, and security group policies.
• Support Secret Server (Delinea) credential management and PAM hygiene.
Security & Patch Management (25%)
• Execute OS patch management cycles for Windows server fleet using Tanium and other enterprise tooling.
• Remediate CVEs and security findings within defined SLAs, coordinating with the Information Security team.
• Ensure all servers adhere to CrowdStrike endpoint protection, Tanium visibility, and security baseline standards.
• Follow change management processes and raise CAB-approved change requests for all production changes.
Operational Support & Collaboration (15%)
• Manage and resolve JSM/ITSM service tickets within agreed SLAs, providing clear updates and documentation.
• Collaborate with US-based team leads across time zones to support infrastructure projects and escalations.
• Contribute to runbooks, SOPs, and knowledge base documentation.
• Support DR test activities and participate in on-call rotation as needed.
Basic Qualifications
Minimum qualifications: 3+ years of hands-on experience administering Windows Server environments (2016/2019/2022).
• Solid experience with Active Directory, Group Policy, DNS, and DHCP administration.
• Hands-on experience with virtualization platforms — VMware vSphere and/or Nutanix AHV.
• Experience with Tanium for patch management, endpoint visibility, and compliance reporting.
• Experience working with ITSM/ticketing systems (Jira Service Management preferred).
• Understanding of change management processes and CAB workflows.
• Strong written and verbal English communication skills — ability to collaborate effectively with US-based team members.
• Ability to work during IST hours with flexibility to overlap with US Pacific Time for key meetings and escalations.
Preferred:
• Hands-on experience managing Microsoft PKI (AD Certificate Services)
• Experience with CrowdStrike Falcon, Tanium, or equivalent endpoint security and visibility tools.
• Exposure to public cloud environments (AWS and/or GCP) for server workloads.
• Familiarity with Secret Server / Delinea or similar PAM platforms.
• Microsoft certifications (e.g., AZ-104, MS-102, or equivalent) a plus.
● Experience with Datadog or equivalent monitoring and observability platforms for server and infrastructure health.
● Familiarity with Infrastructure as Code (IaC) using Terraform for server provisioning and configuration management.
● Exposure to CI/CD pipeline tooling (e.g., GitHub Actions, Jenkins, or equivalent) for infrastructure automation workflows.

Work arrangement
No