Job Summary
The Windows Server Engineer (L3) is a senior technical expert responsible for the design, implementation, and ongoing optimization of enterprise Windows Server infrastructure. Serving as the final escalation point for complex server issues, the role leads root cause analysis, drives infrastructure improvements, and ensures high availability, security, and compliance across on-premises and hybrid cloud environments. The engineer also mentors L1 and L2 teams and contributes to architecture decisions and long-term infrastructure strategy.
Key Responsibilities
Act as the final (L3) escalation point for complex Windows Server incidents, performing in-depth troubleshooting and root cause analysis (RCA). • Design, build, and maintain Windows Server environments (2016, 2019, 2022) across physical, virtual, and hybrid cloud platforms. • Architect and manage Active Directory Domain Services, including forests, domains, trusts, sites, replication, and FSMO roles. • Design and govern Group Policy, DNS, DHCP, DFS, and file and print services to meet enterprise standards. • Manage virtualization platforms such as VMware vSphere and Microsoft Hyper-V, including capacity planning and performance tuning. • Implement and support high-availability solutions, including Windows Failover Clustering, load balancing, and disaster recovery strategies. • Oversee patch management and vulnerability remediation using WSUS, SCCM/MECM, or Intune, in line with security and compliance requirements. • Administer hybrid identity and cloud integration using Microsoft Entra ID (Azure AD), Entra Connect, and Azure infrastructure services. • Develop and maintain PowerShell scripts to automate provisioning, monitoring, reporting, and routine administrative tasks. • Harden server security by applying CIS benchmarks, managing certificates (PKI/AD CS), and enforcing least-privilege access. • Lead backup, restore, and disaster recovery testing to ensure business continuity and meet RTO/RPO targets. • Plan and execute server upgrades, migrations, and consolidation projects with minimal business disruption. • Participate in Change Advisory Board (CAB) reviews and manage changes in accordance with ITIL processes. • Mentor and coach L1/L2 engineers, conduct knowledge-transfer sessions, and review their technical work. • Create and maintain technical documentation, including architecture diagrams, SOPs, runbooks, and knowledge base articles. • Provide on-call support for critical incidents and participate in major incident management as required. Required Technical Skills • Expert-level knowledge of Windows Server 2016/2019/2022 administration and troubleshooting. • Advanced expertise in Active Directory, Group Policy, DNS, DHCP, DFS, and AD Certificate Services. • Hands-on experience with VMware vSphere/ESXi and/or Microsoft Hyper-V. • Strong experience with Windows Failover Clustering and high-availability configurations. • Proficiency in PowerShell scripting and automation. • Working knowledge of Microsoft Azure, Entra ID, and hybrid identity solutions. • Experience with SCCM/MECM, WSUS, or Intune for patching and configuration management. • Familiarity with backup solutions such as Veeam, Commvault, or Azure Backup. • Experience with monitoring tools such as SCOM, SolarWinds, or Azure Monitor. • Solid understanding of networking fundamentals, including TCP/IP, VLANs, firewalls, and load balancers. • Experience working with ITSM tools such as ServiceNow and following ITIL processes. • Bachelor\'s degree in Computer Science, Information Technology, or a related field, or equivalent practical experience. • 8+ years of experience in Windows Server administration, including at least 3 years in an L3 or senior engineering role. • Proven experience supporting large-scale enterprise environments in a 24x7 operational setting. • Demonstrated track record of leading infrastructure projects, migrations, and RCA investigations.
Skill Requirements
Microsoft Certified: Windows Server Hybrid Administrator Associate • Microsoft Certified: Azure Administrator Associate • VMware Certified Professional – Data Center Virtualization (VCP-DCV) • ITIL 4 Foundation
Other Requirements
Strong analytical and problem-solving skills, with the ability to work effectively under pressure. • Excellent verbal and written communication skills for interacting with technical teams and business stakeholders. • Leadership and mentoring abilities to guide and develop junior engineers. • Strong ownership, attention to detail, and a commitment to continuous improvement.