Sr System Engineer (Wintel)

About the role

Support and maintain enterprise identity, PKI, and cloud infrastructure services across on-premises and cloud environments. Responsible for the administration of Windows Server, Active Directory, Microsoft Entra ID, Entra Connect, and Keyfactor Command, while supporting Azure Virtual Desktop (AVD), Nerdio, and AWS-integrated solutions. The role focuses on ensuring system availability, security, and compliance through incident management, certificate lifecycle administration, automation, monitoring, troubleshooting, and continuous service improvement.

Key responsibilities

• Operate and maintain Windows Server environments - including patching, hardening, and troubleshooting
• Manage PKI and certificate lifecycle - design, issue, renew, and revoke certificates; administer KeyFactor Command
• Administer Active Directory and Domain Controllers - including GPOs, replication, and AD health
• Support cloud identity and connectivity - Entra Connect, Entra ID, and integration with on-prem systems
• Manage AWS Connect - integrations and related cloud services
• Deploy and support Azure Virtual Desktop - environments and user profiles
• Administer Nerdio - or AVD provisioning and management
• Participate in incident response, root cause analysis, and postmortems
• Automate operational tasks using scripting where appropriate
• Document runbooks, run regular health checks, and provide knowledge transfer

About you

• Proven experience with Windows Server administration
• Strong knowledge of PKI and certificate management - experience with KeyFactor Command preferred
• Hands-on Active Directory and Domain Controller experience
• Experience with Entra Connect and Entra ID - configuration and troubleshooting
• Familiarity with Azure AVD and Nerdio - for desktop virtualization
• Experience integrating on-prem identity with cloud services
• Scripting skills - for automation and operational tasks
• Solid troubleshooting and incident management skills
• Good communication skills and ability to work within cross-functional teams
• NV1 security clearance must have for this role

Nice to have

• VMware - administration experience.
• CyberArk Machine Identity or other machine identity management experience.
• Experience with AWS services.
• Certifications such as Microsoft Certified - Azure Administrator, Microsoft Certified: Identity and Access Administrator, or relevant security certifications.