Windows and Active Directory Engineer
The role requires deep subject matter expertise with Microsoft's Windows Server platforms (2019, 2016, 2012 R2) and related technologies including extensive automation experience. The candidate will be part of a team that provides ongoing engineering and operational support for the firm's Windows servers and will ensure stability, integrity, and efficiency through automation.
PrincipalResponsibilities/Qualifications
Configure and maintain Active Directory Domain Services (AD DS) infrastructure and LDAP
Implementation and support of cross platform Kerberos integrations between Linux and AD
AD Forest functional level testing and upgrades
Day-to-day maintenance of the Firm's entire server estate (approximately 2,600 servers globally
Troubleshoot and solve a wide variety of hardware, firmware, software and configuration issues
Install and configure MS Windows Server 2016 and 2019 onto physical and virtual systems using the Firm's automated build process (MDT/VMware).
Architecting, building, and maintaining the company's internal Windows automation systems and workflows using Chef, PowerShell, DSC and WSUS
Ensure estate is kept up-to-date with OS patches, firmware and/or Driver Stacks
Create application packages using PowerShell and basic script logic for MSI software installations
Create re-usable modules with Powershell and/or python and integrate with CI/CD pipelines such as Jenkins to automate testing and deployments
Maintain and enhance monitoring and visibility of the server estate via metrics and log gathering, analysis, alerting and creation of functional dashboards
Develop and Document procedures, Write Run-books, FAQs, "How-To's", Commit code to GitHub for peer review
Participate in the selection, design, and implementation of new system designs, including servers, data storage systems, and backup systems, as well as the systems software that runs on those servers with key stakeholders
Share weekend on-call rotation duties
MinimumQualifications/SkillsRequired
8+ years' experience in information technology as a SystemsAdministrator/Engineer
4+ years' experience managing a large Active Directory environment. Experience should include deploying and upgrading Active Directory environments.
4+ years' of experience coding and scripting in multiple languages (PowerShell, Ruby, Python)
Expert in at least one of the following scripting language used for automation or creating tools: Powershell, ruby, or python
Experience with Linux Kerberos integration and Redhat IPA
A bachelor's degree in Computer Science, Electrical Engineering or Mathematics
Experience with Chef, MDT or other configuration management technologies (e.g. Ansible, Puppet, Microsoft DSC etc)
Experience with application packaging and package management systems such as chocolatey, SSCM.
Experience with windows cluster services and SQL server always on availability groups
Experience with Open Source Monitoring tools (Prometheus, Grafana, and the ELK Stack)
Experience with configuring and troubleshooting HTTP Kerberos Authentication on IIS or other web server platforms.
Experience working against 3rd party RESTful APIs for system integrations.
Familiarity with promoting code via version control (GitHub) and collaborating on coding projects.
Familiarity with coding style guides and coding standards.
Experience implementing GPOs (Group Policy in Active Directory)
Familiarity with Hewlett Packard (HP) Proliant and Dell server products