Windows and Active Directory Engineer

The role requires deep subject matter expertise with Microsoft’s Windows Server platforms (2019, 2016, 2012 R2) and related technologies including extensive automation experience. The candidate will be part of a team that provides ongoing engineering and operational support for the firm’s Windows servers and will ensure stability, integrity, and efficiency through automation.

Principal Responsibilities/Qualifications

• Configure and maintain Active Directory Domain Services (AD DS) infrastructure and LDAP
• Implementation and support of cross platform Kerberos integrations between Linux and AD
• AD Forest functional level testing and upgrades
• Day-to-day maintenance of the Firm’s entire server estate (approximately 2,600 servers globally
• Troubleshoot and solve a wide variety of hardware, firmware, software and configuration issues
• Install and configure MS Windows Server 2016 and 2019 onto physical and virtual systems using the Firm’s automated build process (MDT/VMware).
• Architecting, building, and maintaining the company’s internal Windows automation systems and workflows using Chef, PowerShell, DSC and WSUS
• Ensure estate is kept up-to-date with OS patches, firmware and/or Driver Stacks
• Create application packages using PowerShell and basic script logic for MSI software installations
• Create re-usable modules with Powershell and/or python and integrate with CI/CD pipelines such as Jenkins to automate testing and deployments
• Maintain and enhance monitoring and visibility of the server estate via metrics and log gathering, analysis, alerting and creation of functional dashboards
• Develop and Document procedures, Write Run-books, FAQs, “How-To’s”, Commit code to GitHub for peer review
• Participate in the selection, design, and implementation of new system designs, including servers, data storage systems, and backup systems, as well as the systems software that runs on those servers with key stakeholders
• Share weekend on-call rotation duties

Minimum Qualifications/Skills Required

• 8+ years’ experience in information technology as a Systems Administrator/Engineer
• 4+ years’ experience managing a large Active Directory environment. Experience should include deploying and upgrading Active Directory environments.
• 4+ years’ of experience coding and scripting in multiple languages (PowerShell, Ruby, Python)
• Expert in at least one of the following scripting language used for automation or creating tools: Powershell, ruby, or python
• Experience with Linux Kerberos integration and Redhat IPA
• A bachelor’s degree in Computer Science, Electrical Engineering or Mathematics
• Experience with Chef, MDT or other configuration management technologies (e.g. Ansible, Puppet, Microsoft DSC etc)
• Experience with application packaging and package management systems such as chocolatey, SSCM.
• Experience with windows cluster services and SQL server always on availability groups
• Experience with Open Source Monitoring tools (Prometheus, Grafana, and the ELK Stack)
• Experience with configuring and troubleshooting HTTP Kerberos Authentication on IIS or other web server platforms.
• Experience working against 3rd party RESTful APIs for system integrations.
• Familiarity with promoting code via version control (GitHub) and collaborating on coding projects.
• Familiarity with coding style guides and coding standards.
• Experience implementing GPOs (Group Policy in Active Directory)
• Familiarity with Hewlett Packard (HP) Proliant and Dell server products