Windows System Engineer

Who We Are Looking For :

We are seeking a Senior Windows Systems Engineer to join our elite Windows Systems Operations team — the backbone of our organisation. This is a pivotal role for someone who thrives at scale, managing thousands of assets and services across all company entities and offices worldwide. You will be instrumental in leveraging the maturity, security, automation, and resiliency of our entire IT perimeter, working alongside a team of seasoned Subject Matter Experts (SMEs) who are passionate about operational excellence.

This position demands deep technical expertise, a proactive automation mindset, and the ability to balance security, reliability, and performance across a complex, globally distributed infrastructure. If you are an engineer who takes pride in solid architecture, strategic thinking, and continuous improvement, we want to meet you.

Your Responsibilities:

-Managing and administering multi-domain Active Directory (AD) environments, including

Group Policy Objects (GPO), cross-domain trusts, and LEAVER/JOINER automation workflows

-Overseeing Privileged Access Management using CyberArk and Password Manager Plus, including vault management, privileged account onboarding for Windows and Linux servers, and integration with authentication systems

-Administering Windows Certificate Authority (CA) and Public Key Infrastructure (PKI), including SSL/TLS lifecycle management and certificate automation

-Implementing Windows Server hardening and security compliance using CIS Benchmarks, PingCastle, ANSSI guidelines, NIST frameworks, Microsoft guidance, and Group Policy enforcement

-Managing secure remote access, including RDP hardening, Network Level Authentication (NLA), Just-In-Time (JIT) access, and VPN integration

-Orchestrating Windows Server patching and software deployment using WSUS, SCCM, Patch Manager Plus, and Ivanti, with PowerShell and custom scripting for automated deployment workflows, compliance reporting and emergency patching

-Supporting Citrix infrastructure (session-based and VDI), application publishing, and troubleshooting

-Ensuring disaster recovery and business continuity for production and DR environments, including failover testing and backup validation

-Monitoring server performance, capacity planning, and integrating with centralised monitoring tools such as LogicMonitor, WhatsUP Gold, PagerDuty, Coralogix, and Azure Log Analytics for incident alerting and log aggregation

-Maintaining detailed documentation and collaborating with cross-functional teams (Network, Security, DevOps, IAM)

Required Experience & Skills:

-Advanced expertise in Windows Server administration (5+ years), including Server 2019/2022, domain controllers, and clustering

-Advanced knowledge of Active Directory, GPO, LAPS, and security group management in multi-domain environments

-Intermediate to advanced PowerShell scripting and experience with Ansible, Terraform, and infrastructure-as-code tools for cross-platform automation and infrastructure orchestration

-Hands-on experience with CyberArk PAM, Password Manager Plus, and privileged access workflows

-Strong understanding of security compliance frameworks (CIS, NIST, ANSSI, PingCastle), audit logging, and vulnerability management

-Experience with RDP, NLA, JIT admin access, and remote access security

-Proficiency with WSUS, SCCM, Patch Manager Plus, and Ivanti for patching and software deployment; experience with scripting for deployment automation

-Solid networking fundamentals (TCP/IP, DNS, AD site topology, VPN)

Incident response mindset, strong documentation discipline, and experience with

-CAB/change management

-Excellent collaboration and communication skills, with awareness of multi-geography operations

Preferred Qualifications:

-Experience with centralised monitoring platforms (LogicMonitor, WhatsUP Gold) and incident alerting tools (PagerDuty, Coralogix, Azure Log Analytics)

-Familiarity with Git version control, YAML configuration, and Python scripting

-Experience with Terraform and Infrastructure-as-Code principles

-Microsoft Copilot proficiency for AI-assisted scripting and automation

-Intermediate Citrix administration

-Experience in financial services, banking, or regulated environments

-Certifications such as Microsoft Certified: Windows Server Hybrid Administrator, CompTIA

-Security+, or CyberArk Certified Implementation Specialist