Infrastructure Engineer (Windows & Cloud)

A. Windows Server Administration (Primary)

• Administer and maintain Windows Server environments including security and performance monitoring.
• Manage server provisioning, decommissioning, and lifecycle activities in alignment with change management policies.
• Troubleshoot system-level issues, review event logs, and perform root-cause analysis for recurring incidents.
• Maintain system hardening standards and ensure compliance with security policies and audit requirements.
• Coordinate scheduled maintenance windows including patching cycles, restarts, and capacity adjustments.

B. Active Directory & Identity Services (Primary)

• Administer and maintain Active Directory Domain Services (AD DS) including user and group management, Group Policy Objects (GPOs), Organizational Units (OUs), and trust relationships.
• Support DNS and AD-integrated services to ensure directory health and name resolution continuity.
• Conduct periodic AD health checks, replication monitoring, and audits of privileged access accounts.
• Collaborate with the security team to enforce least-privilege access principles and manage privileged identity workflows (e.g., CyberArk or equivalent PAM tools).
• Support onboarding and off boarding processes by executing access provisioning and de-provisioning in accordance with approved procedures.

C. Cloud Platform Operations - Azure &AWS (Primary)

• Perform day-to-day operational management of cloud resources including Virtual Machines, storage accounts, virtual networks, and IAM roles/policies.
• Monitor cloud workload health using native platform tools (Azure Monitor, AWS CloudWatch) and escalate anomalies per defined SLAs.
• Manage cloud resource tagging, cost visibility reporting, and contribute to FinOps practices to prevent cloud spend overruns.
• Apply cloud security baseline configurations
• Participate in cloud migration and onboarding activities, including infrastructure readiness assessments and post-migration validation.

D. Infrastructure as Code (IaC)

• Maintain and update existing Terraform templates for infrastructure provisioning.
• Perform modifications to IaC scripts under the guidance of senior engineers or architects, including variable updates, module adjustments, and plan/apply cycles.
• Maintain version control disciplines to align best security practices.
• Participate in infrastructure drift detection and remediation activities to ensure deployed resources match approved configurations.

Overall Experience

• 4-7 years for Windows Server and Active Directory administration.
• 2-4 years of operational cloud experience across Azure and/or AWS.
• Demonstrated ability to independently manage operational tasks with minimal supervision.
• Windows Server 2016/ 2019 / 2022 administration
• OS patching via WSUS or Microsoft Update Management
• Performance monitoring: Task Manager, PerfMon, Resource Monitor
• Server roles: IIS, File Services, DNS, DHCP
• Event Log analysis and incident triage
• Local and domain Group Policy configuration
• Minimum 4 years of hands-on experience in IT infrastructure operations.
• Proven track record in a hybrid environment (on premises + cloud).
• Experience in a structured IT operations team, ideally within government, statutory board, or large enterprise.
• AD DS: Users, Groups, OUs, GPO management
• AD replication, FSMO roles, and site topology awareness
• DNS and DHCP within AD-integrated environments
• AD health and audit tools (DCDiag, Repadmin, ADSIEdit)
• Privileged Access Management (PAM) concepts CyberArk exposure is an advantage

(IaC / Automation)

• 1-3 years of exposure to Terraform or equivalent IaC tooling.
• Ability to read, understand, and make guided modifications to existing IaC code.
• Practical PowerShell scripting experience of at least 2-3 years.