出海雷达

Cloud Windows Infrastructure Engineer

开发工程限定地区（需当地身份）
公司Gresham Technologies PLC
薪资未公开
工作地点India
地域资格限定地区（需当地身份）
时区要求日间重叠约 6 小时，基本正常作息
用工类型Full Time
发布时间今天
数据来源Himalayas
前往 Himalayas 查看并投递 →
注意地域限制：该职位明确限定在 India 招聘。如果你是位于中国大陆的求职者，通常需要当地工作身份才能投递，或需与雇主确认是否接受独立合同（Contractor）形式合作。
关于本页中文：职位描述由本机离线模型翻译，属机器翻译，供快速判断用；正式沟通与投递请以英文原文为准。官方翻译通道恢复后会自动重译升级。

作为高级 Windows 基础设施工程师，你是 Gresham 管理服务平台的技术头。这个系统在 AWS 上托管的多客户环境中运行。工作基于深层次的 Windows Server 操作：Active Directory, IIS,混合身份，集团政策，PowerShell,证书服务以及更广泛的 Microsoft 生态系统。AWS 是所有这些运行的平台。舒适性与云层有关键，你将每天运营它，但这是微软堆和其操作细微调度定义这一角色。我们首先可以聘请为 Windows 的专业知识；深层云层是一种强大的系统管理员吸收。财富是 Windows Server 2019及以上，端到端.Linux 足迹很小。这是一个想要深入进入微软堆的角色而不是在平台上散布。这是一项100%个体贡献者角色。你不会管理或领导团队。你将拥有复杂事件从端到端，设定技术标准，并作为云支持功能高级升级点。你将工作美国时间，所以请只申请如果你能够这样做。作用责任 · 在多客户端，AWS 托管环境中解决复杂 Windows Server 事件的负责人 从分类到根源补救。·管理和硬化 Windows Server 2019/2022/2025:主动目录 （森林/域设计，复制，FSMO,GPO,信托）,DNS,DHCP,IIS,WSUS,AD CS,文件 &打印服务。·操作混合身份：AD 现场 AWS 管理微软 AD,联邦与 Entra ID (Azure AD) /AD FS,SAML / OIDC / OAuth,Kerberos,MFA. ·创作者和维护 PowerShell 自动化：批量管理，计划任务，配置漂移纠正，报告和 DSC 如有必要。·运行为 Windows 工作负载的 AWS 托管层：EC2,EBS,VPC,IAM,路线 53,Watch,系统经理 （补丁，会议，运行经理）,云端管理器，备份服务管理员在：· 驱动 Windows 系统的可观性：事件日志策略，性能基线，CloudWatch 指标和警报，Grafana 仪表板。·编写运行簿，SOP 和知识基础文章来编码操作标准。·参与 ITIL 事件，问题和变化管理；担任高级调用升级。Essentia.

查看英文原文

Job Purpose
As Senior Windows Infrastructure Engineer, you are the technical anchor for the Windows estate that powers Gresham's managed services platform — a multi-client environment hosted on AWS. The work is grounded in deep Windows Server operations: Active Directory, IIS, hybrid identity, Group Policy, PowerShell, certificate services, and the wider Microsoft ecosystem.

AWS is the platform on which all of this runs. Comfort with the cloud layer matters and you will operate it daily, but it is the Microsoft stack — and its operational nuance — that defines this role. We hire for deep Windows expertise first; the cloud layer is something a strong sysadmin can absorb.

The estate is Windows Server 2019 and above, end-to-end. Linux footprint is negligible — this is a role for someone who wants to go deep on the Microsoft stack rather than be spread thin across platforms.

This is a 100% individual contributor role. You will not manage or lead a team. You will own complex incidents end-to-end, set technical standards by example, and act as the senior escalation point for the Cloud Support function. You will be working US hours so please only apply if you are able to do so.

Role Responsibilities
· Lead resolution of complex Windows Server incidents across multi-client, AWS-hosted environments — from triage to root cause to remediation.

  • Administer and harden Windows Server 2019/2022/2025: Active Directory (forest/domain design, replication, FSMO, GPOs, trusts), DNS, DHCP, IIS, WSUS, AD CS, file & print services.
  • Operate hybrid identity: AD on-prem ↔ AWS Managed Microsoft AD, federation with Entra ID (Azure AD) / AD FS, SAML / OIDC / OAuth, Kerberos, MFA.
  • Author and maintain PowerShell automation: bulk administration, scheduled tasks, configuration drift correction, reporting, and DSC where appropriate.
  • Operate the AWS hosting layer for Windows workloads: EC2, EBS, VPC, IAM, Route 53, CloudWatch, Systems Manager (Patch Manager, Session Manager, Run Command), Backup, Directory Service.
  • Manage IIS in depth: sites, application pools, bindings, ARR / URL Rewrite, SSL/TLS, failed request tracing, and performance tuning.
  • Drive observability of the Windows estate: event log strategy, performance baselines, CloudWatch metrics & alarms, Grafana dashboards.
  • Author runbooks, SOPs, and knowledge base articles to codify operational standards.
  • Participate in ITIL incident, problem, and change management; act as senior on-call escalation.

Essential Skills & Experience
Windows Server & Microsoft Infrastructure (Primary)
· 7+ years operating Windows Server in production, with deep hands-on experience on Windows Server 2019 and above.

  • Active Directory at depth: forest/domain design, replication, FSMO roles, trusts, sites & services, schema, tombstone & recovery.
  • Group Policy at scale: design, troubleshooting (RSoP, gpresult), security baselines, WMI filtering.
  • IIS at depth: site & app pool configuration, ARR, URL Rewrite, SSL/TLS, failed request tracing, performance tuning.
  • DNS, DHCP, WSUS, and Active Directory Certificate Services (AD CS) — real operational experience.
  • Advanced PowerShell: scripting, modules, remoting, error handling, automation patterns, DSC familiarity.
  • Windows patching at scale: planning, deployment, rollback, and troubleshooting in regulated environments.
  • Windows performance troubleshooting: PerfMon, ETW, memory dump analysis, IIS request diagnostics.

Identity & Authentication
· Hybrid identity: AD on-prem ↔ cloud, Entra ID (Azure AD) Connect / federation, AD FS.

  • SAML 2.0, OIDC, OAuth 2.0, Kerberos, LDAP, MFA — practical implementation and troubleshooting.
  • Certificate management and PKI in enterprise Windows environments.

AWS Hosting Platform (Operational Competence)
· Day-to-day comfort operating Windows workloads in AWS: EC2, EBS, VPC, IAM, Route 53, CloudWatch.

  • AWS Systems Manager for Windows fleet management: Patch Manager, Session Manager, Run Command, State Manager, Parameter Store.
  • AWS Directory Service / Managed Microsoft AD / AD Connector.

Note:Deep AWS architect-level expertise is not required. We hire for Windows depth; the cloud layer is the platform, and we expect strong fundamentals plus willingness to grow.
Service Operations & Remote Working
· Strong ITIL grounding: incident, problem, change, and service lifecycle management.

  • Prior experience in an MSP or shared-services environment — multiple client estates managed under SLA.
  • Advanced / fluent professional English, written and spoken.
  • Reliable, distraction-free home office with stable broadband (100 Mbps+ recommended), reliable power, and a professional video setup.
  • Ability to work New York-aligned hours consistently, with the same presence and responsiveness as an office-based colleague.

Working Hours, Remote Setup & Engagement
This role is 100% remote and 100% individual contributor. To match the responsiveness of an office-based engineer:
·
Working hours:You will operate aligned to New York business hours (08:30–17:30 ET). Typical Brazil hours: 09:30–18:30 BRT during EDT (US summer) and 10:30–19:30 BRT during EST (US winter). You must be online, responsive, and actively engaged throughout core hours, the same as if you were sat with the team in the office.

  • Home office:Quiet, ergonomic workspace with stable broadband (100 Mbps+ recommended), reliable power, and a professional video / audio setup. This is not a digital-nomad role.
  • Engagement model:PJ (Pessoa Jurídica) or via Employer of Record — confirmed during recruitment. Tax, invoicing, and benefits arrangements discussed at offer stage.
  • Equipment & expenses:Discussed at offer stage.
  • On-call:Participation in a senior escalation rota for major incidents — compensated in line with policy.

Equal Opportunities Statement
At Gresham, we are committed to building a diverse and inclusive workforce that reflects the communities we serve. We actively encourage applications from individuals of all backgrounds and are dedicated to providing a workplace where everyone feels valued, respected and supported.

We make employment decisions based on merit, skills and potential, and do not discriminate based on any protected characteristic. We are also committed to making reasonable adjustments throughout the recruitment process and employment lifecycle.Originally posted on Himalayas

本页面信息整理自 Himalayas，版权归原发布方所有。职位可能随时关闭，投递请以原始页面为准。 本站只做信息聚合展示，不参与招聘流程，也不向求职者收取任何费用。

← 返回全部职位