Senior Microsoft Systems Engineer

The Senior Microsoft Infrastructure Engineer is the hands-on specialist responsible for discovering, documenting, and designing toward a consolidated target state for the Microsoft server, messaging, and core network services that carry the bulk of the agency’s day-to-day operations. This person is instrumental during the discovery phase of the program - building the first authoritative picture of the Windows Server estate, Microsoft Exchange messaging environment, and Active Directory and DDI (DNS, DHCP, IPAM) footprint - and then translates that picture into concrete design recommendations for the future state.

Two design outcomes anchor this role. First, moving the enterprise from a fragmented Active Directory footprint toward a single, unified Active Directory and a single domain that serves the enterprise as one. Second, designing a unified messaging solution so that a user is one user across the enterprise - with one mailbox and one identity - not a different mailbox for every component they touch. This is not a keep-the-lights-on role. It is a discover-then-design role for a professional who sees the target state clearly and can bring the environment to it.

This person works fluently across Windows Server (2016-2022) and Microsoft Exchange in both virtualized and on-premises environments, with deep expertise in DNS, DHCP, and IP address management, including Infoblox. The role covers the on-premises and virtualized footprint and partners with the Cloud Engineer, who covers the public-cloud estate. The Senior Microsoft Infrastructure Engineer works closely with executive leadership and cross-functional engineering teams across network, cloud, identity, security, and enterprise architecture, and supports governance processes and milestone reviews throughout the program.

This is a full-time, onsite role based in Washington, D.C., requiring availability during normal business hours, with occasional night and weekend work as program demands require.

Key Responsibilities

• Lead discovery and inventory of the Windows Server estate (2016-2022), Microsoft Exchange messaging environment, Active Directory footprint, and DDI services (DNS, DHCP, IPAM/Infoblox) across virtual and physical systems, on-premises and hybrid.

• Design the target-state Active Directory - recommend and lead the path from the current fragmented footprint toward a single enterprise Active Directory and a single domain, including trust rationalization, forest consolidation approach, Group Policy strategy, and identity coherence across the environment.

• Design the unified messaging solution so a user carries one mailbox and one identity across the enterprise - not one per component. Own the Exchange target-state design (on-premises, hybrid, or cloud-forward as the analysis warrants) and the migration path to reach it.

• Rationalize DDI - map the DNS, DHCP, and IPAM (Infoblox) landscape today, identify duplication and drift, and recommend a consolidated DDI architecture that supports the target-state Active Directory and messaging design.

• Reconcile findings against configuration management inventory; flag configuration drift, duplication, unsupported systems, and at-risk configurations. Feed findings into the enterprise architecture baseline the program is building.

• Assess patching, lifecycle, resilience, and secure configuration of core Microsoft infrastructure against federal frameworks and CIS Benchmarks.

• Partner across disciplines - with network, cloud, identity, security, and enterprise architecture teammates - so the infrastructure picture supports the broader consolidation and modernization mission.

• Produce professional-grade documentation, including architecture diagrams, configuration baselines, and design recommendations that can withstand executive and federal-stakeholder scrutiny.

• Support governance and milestone reviews and brief technical findings and recommendations to leadership and federal stakeholders in language appropriate to the audience.

What Success Looks Like in the First Six Months

• An authoritative inventory of the Windows Server, Exchange, Active Directory, and DDI footprint exists where none existed before.

• A clear, defensible target-state design for a single Active Directory and a single domain is on paper, reviewed with the C.A.S.E. leadership team, and ready to walk into governance conversations., * The Senior Microsoft Infrastructure Engineer is a trusted voice inside the program on all things Microsoft infrastructure - hands-on enough to know the environment, senior enough to recommend the path forward.

Education & Certification

• Bachelor’s degree in Computer Science, Information Technology, or a related field preferred (or equivalent experience).

• Microsoft Certified: Windows Server Hybrid Administrator Associate (or an equivalent senior Windows Server certification) required.

• One or more of the following strongly preferred: Microsoft 365 Certified: Messaging Administrator Associate (MS-203); VMware Certified Professional - Data Center Virtualization (VCP-DCV); an Infoblox DDI certification; CompTIA Security+; ITIL 4 Foundation.

Experience

• At least 10 years of progressive systems engineering experience centered on Microsoft server and messaging infrastructure.

• Deep, hands-on expertise with Windows Server (2016-2022) and Microsoft Exchange across virtualized and on-premises environments.

• Demonstrated design experience consolidating Active Directory footprints - forest and domain rationalization, trust cleanup, unified identity - in large enterprise environments.

• Demonstrated design experience with unified messaging - moving fragmented mailbox environments to a consolidated single-identity, single-mailbox model.

• Deep expertise with DNS, DHCP, and IPAM (DDI), including Infoblox.

• Experience discovering, documenting, and rationalizing core infrastructure in large, complex enterprise environments; federal experience strongly preferred.

Technical Expertise

• Windows Server (2016-2022): roles, services, administration, and hardening.

• Active Directory: forests, domains, trusts, sites and services, Group Policy - with a design orientation, not just administration.

• Microsoft Exchange messaging (on-premises and hybrid), including migration and consolidation design.

• DNS, DHCP, and IP address management (DDI), including Infoblox.

• Virtualization platforms (VMware vSphere, Microsoft Hyper-V).

• Server discovery, inventory, patching, lifecycle, and resilience.

• Working knowledge of federal security frameworks (e.g., NIST SP 800-53) and secure configuration baselines (e.g., CIS Benchmarks).

Additional Skills

• Solution-oriented - recommends a path forward, does not stop at current-state documentation.

• Excellent written and verbal communication, including briefing senior leadership and federal stakeholders.

• Strong documentation discipline and attention to detail.

• Strong analytical, problem-solving, and risk-identification skills.

• Effective at collaborating with cross-functional teams to align technical work with program outcomes.

• Adaptability in a fast-paced, evolving environment with shifting priorities.

Clearance

• Must be a U.S. citizen.

• Must be able to obtain and maintain, at minimum, a federal Minimum Background Investigation (MBI). Candidates with an active MBI (or higher) are strongly preferred.

Pulled from the full job description

• Health insurance
• Paid time off
• Vision insurance
• Dental insurance

• Opportunities for advancement, * Contribute to a mission-critical federal modernization program with high visibility and impact.

• Own the Microsoft and core-services backbone the organization runs on every day - and design the target state, not just document the current one.

• Join a growing firm that values innovation, technical excellence, and problem-solving.

• Work alongside a senior, multidisciplinary team of architects and engineers.

• Real opportunities for professional growth and advancement as the firm scales.

Pay: $130,000.00 - $150,000.00 per year

Benefits:

• Dental insurance
• Health insurance
• Paid time off
• Vision insurance

License/Certification:

• Public Trust Clearance (Required)

The C.A.S.E. Engineering Group is an information technology engineering firm specializing in cybersecurity advisory services, IT architecture modernization, IT strategic planning, and the design and engineering of innovative systems, software, and applications. C.A.S.E. stands for Cybersecurity, Architecture, Strategy, and Engineering - the four disciplines that anchor how the firm solves problems for its clients. C.A.S.E. tailors its approach to each engagement while grounding every solution in industry best practices to ensure efficiency, security, and long-term success.