Software Maintenance Engineer (3rd Line)

We are looking for an experienced Software Maintenance Engineer (3rd Line) to join our existing team. The scope of work involves maintaining and improving customer infrastructure built on the Microsoft technology stack, ensuring stability, security, and continuous improvement across a wide range of enterprise services.

Unlock the potential of remote work in Kazakhstan, giving you the flexibility to work from home or access our offices in Astana, Almaty or Karaganda. Responsibilities

• Maintain and improve customer infrastructure related to the Microsoft technology stack
• Administer and support Active Directory Domain Services along with related roles and services
• Manage Public Key Infrastructure through AD CS
• Support and troubleshoot Failover Clustering environments
• Oversee Active Directory Federation Services and Network Policy and Access Services (NPAS)
• Handle Key Management Services (KMS) and SQL Always On/Availability Group configurations
• Administer Remote Desktop Services and Microsoft Identity Manager 2016
• Provide endpoint management support using System Center Configuration Manager and/or Tanium
• Maintain Exchange 2016 and Office 365 environments
• Manage Azure identity and security, Intune/Co-management with SCCM, and M365 security features, including sensitivity labels and DLP
• Support Windows Server operating systems ranging from 2008 to 2019

Requirements

• 3+ years of hands-on experience in a Software Maintenance or Infrastructure Engineering role
• Expertise in Active Directory Domain Services, AD CS (Public Key Infrastructure), and Active Directory Federation Services
• Proficiency in Failover Clustering, NPAS (Network Policy and Access Services), and KMS
• Background in SQL Always On/Availability Group and Remote Desktop Services
• Knowledge of Microsoft Identity Manager 2016
• Skills in endpoint management using System Center Configuration Manager and/or Tanium
• Competency in Exchange 2016 and Office 365 administration
• Familiarity with Azure identity/security, Intune/Co-management with SCCM, and M365 security (sensitivity labels, DLP)
• Understanding of Windows Server operating systems from 2008 through 2019
• Minimum English language level of B1+

We offer

• We connect like-minded people:

• Delivering innovative solutions to industry leaders, making a global impact

• Enjoyable working environment, whether it is the vibrant office or the comfort of your own home

• Opportunity to work abroad for up to two months per year

• Relocation opportunities within our offices in 55+ countries

• Corporate and social events

• We invest in your growth:

• Leadership development, career advising, soft skills and well-being programs

• Certifications, including GCP, Azure and AWS

• Unlimited access to EPAM's internal learning database

• Free English classes with certified teachers

• Discounts in local language schools, including online courses for the Kazakh language

• We cover it all:

• Participation in the Employee Stock Purchase Plan

• Monetary bonuses for engaging in the referral program

• Medical & family care package

• Six trust days per year (sick leave without a medical certificate)

• Coverage of psychology sessions of your choice

• Benefits package (sports activities, a variety of stores and services)

• Housing support program: preferential mortgage access via Otbasy Bank partnership

EPAM is global leader in AI transformation engineering and integrated consulting, serving Forbes Global 2000 companies and ambitious startups. With over thirty years of expertise in custom software, product and platform engineering, we empower our clients to become AI-Native enterprises, driving measurable value from innovation and digital investments.