Infrastructure Engineer - Windows Services

You’ll be part of our Windows teams to manage the Windows server fleet. You’ll have the opportunity to take ownership of modernizing Bloomberg’s global Active Directory (AD) infrastructure - a critical backbone for authentication, authorization, and identity services across our development and production environment. You’ll play a pivotal role in evolving our AD architecture to meet the scale, complexity, and security demands of a highly distributed environment used by thousands of engineers and systems worldwide, ensuring it remains up to date with latest reliability and security best practices.

• 4+ years of experience architecting and administering Active Directory in enterprise environments

• Deep expertise in Active Directory, Group Policy, DNS, DHCP, and Windows Server platforms

• Knowledge of the supporting services in a Windows Server environment such as SCCM, Certificate Authorities

• Strong understanding of identity lifecycle management, authentication protocols (Kerberos, NTLM), and access control models

• Proven experience designing and implementing AD forests, domains, trusts, and replication strategies

• Familiarity with hybrid identity scenarios (on-prem + Azure AD)

• Proficiency in scripting and automation using PowerShell

• Solid understanding of change management, backup/recovery strategies, and security best practices in AD

• Experience working in regulated environments with an emphasis on compliance and auditing

• A Degree in Computer Science, Engineering, Mathematics, similar field of study or equivalent work experience

We’d love to see:

• Hands-on experience with Azure AD, Azure AD Connect, and Conditional Access policies

• Experience integrating AD with other platforms (e.g., Linux systems, SaaS applications)

• Familiarity with MFA, SSO, and federation technologies (e.g., ADFS, SAML, OAuth)

• Strong documentation and communication skills

• A mindset for proactive problem-solving and continuous improvement

• Microsoft certifications such as Microsoft Certified: Identity and Access Administrator Associate or Azure Solutions Architect

• Experience with enterprise-wide EDR or Antivirus deployment and maintenance

Salary Range = 130,000 - 225,000 USD Annual + Benefits + Bonus

The referenced salary range is based on the Company’s good faith belief at the time of posting. Actual compensation may vary based on factors such as geographic location, work experience, market conditions, education/training and skill level.

We offer one of the most comprehensive and generous benefits plans available and offer a range of total rewards that may include merit increases, incentive compensation (exempt roles only), paid holidays, paid time off, medical, dental, vision, short and long term disability benefits, 401(k) +match, life insurance, and various wellness programs, among others. The Company does not provide benefits directly to contingent workers/contractors and interns.

Discover what makes Bloomberg unique - watch our for an inside look at our culture, values, and the people behind our success.

Bloomberg is an equal opportunity employer and we value diversity at our company. We do not discriminate on the basis of age, ancestry, color, gender identity or expression, genetic predisposition or carrier status, marital status, national or ethnic origin, race, religion or belief, sex, sexual orientation, sexual and other reproductive health decisions, parental or caring status, physical or mental disability, pregnancy or parental leave, protected veteran status, status as a victim of domestic violence, or any other classification protected by applicable law.

The Bloomberg Terminal brings together real-time data on every market, breaking news, in-depth research, powerful analytics, communications tools and world-class execution capabilities - in one fully integrated solution. At the heart of this mission is our Managed Systems Engineering (MSE) group, the team responsible for building and maintaining the compute infrastructure that keeps Bloomberg running 24/7 across the globe.