Engineer - Windows Platform

The Senior Engineer, Windows Platform is responsible for the engineering, automation, reliability, security, and lifecycle management of Client enterprise Microsoft infrastructure platforms across corporate, distribution center, store, and cloud environments. This role shares ownership over the design and operational integrity of Windows Server, Active Directory, Microsoft Entra ID, Microsoft 365, Azure infrastructure services, VMware-based workloads, backup/recovery, storage integration, monitoring, and related core infrastructure services.

This is a hands-on engineering role, not an operations role. The engineer will develop repeatable platform standards, automate manual processes, improve observability and recovery capabilities, support hybrid-cloud modernization, and serve as a technical escalation point for complex infrastructure issues in a 24x7 retail environment.

The role partners closely with security, network, cloud, application, database, endpoint, and operations teams to ensure Client Microsoft ecosystem remains secure, performant, scalable, supportable, and aligned to business needs. The role also provides technical direction and delivery coordination across internal teams and managed services partners (including offshore technical resources) to ensure handoffs, escalations, service quality, and platform outcomes remain aligned to operational standards and business priorities., * Hybrid Cloud, Windows, and Microsoft Platform Engineering

• Design, engineer, and maintain enterprise Windows Server platforms across on-premises, VMware, and Azure environments.
• Own platform standards for Windows Server, Active Directory Domain Services, Entra ID, Group Policy, DNS, DHCP, DFS, IIS, RDS, certificate services, and related Microsoft infrastructure components.
• Maintain Windows Server images, templates, configuration standards, hardening baselines, deployment patterns, and decommissioning processes.
• Drive lifecycle management for Windows Server versions, domain controllers, virtualization dependencies, management agents, patching standards, and supportability requirements.
• Evaluate and recommend platform improvements to increase resiliency, scalability, security, and operational efficiency.
• Azure, VMware, Storage, Backup, and Infrastructure Modernization
• Support engineering Azure infrastructure services, including compute, virtual networking, storage, backup, monitoring, identity integration, and governance.
• Design and support hybrid connectivity patterns between Azure and on-premises infrastructure.
• Engineer and support VMware infrastructure, including vCenter, ESXi, vSphere clusters, HA/DRS, templates, resource management, and virtual machine lifecycle.
• Support enterprise storage and backup platforms, including SAN/NAS integration, Veeam Backup & Replication, Veeam ONE, and recovery validation.
• Partner with network, cloud, database, and application teams to support hybrid-cloud migration, infrastructure modernization, and platform resilience initiatives.
• Identity, Microsoft 365, Security, and Compliance Engineering
• Engineer and support Active Directory and Microsoft Entra ID identity services, including synchronization, conditional access, privileged access, authentication, authorization, and identity lifecycle controls.
• Support Microsoft 365 platform governance across Exchange Online, SharePoint Online, Teams, OneDrive, and related collaboration services in partnership with application and security teams.
• Implement Windows, Azure, AD/Entra, and M365 security controls aligned to internal policy, SOX, PCI-DSS, audit, and vulnerability-management requirements.
• Partner with cybersecurity teams to remediate vulnerabilities, harden configurations, reduce identity attack paths, and improve auditability.
• Develop documentation and evidence needed to support internal and external audits.
• Reliability, Observability, Incident Response, and Operational Excellence
• Serve as a technical escalation point for complex production issues impacting Windows, identity, Microsoft 365, Azure, VMware, backup, and infrastructure services.
• Lead troubleshooting, root cause analysis, problem management, and permanent remediation for recurring or high-impact issues.
• Define and improve monitoring, alerting, logging, dashboards, and health checks for critical Windows and Microsoft infrastructure platforms.
• Support high availability, backup, disaster recovery, and restore testing for critical infrastructure services.
• Participate in a 24x7 on-call rotation for level 3 escalations and scheduled maintenance windows as needed.
• Technical Engineering Leadership, Managed Services Coordination, Standards, and Documentation
• Lead & support assigned infrastructure projects from design through implementation, change execution, communication, and post-change validation.
• Provide day-to-day technical guidance, work prioritization, mentoring, and quality oversight for administrators, and other delivery resources.
• Coordinate with managed services providers and offshore technical delivery teams, ensuring handoffs, escalations, service quality, and cross-time-zone collaboration are effectively managed.
• Develop technical standards, architecture diagrams, operational runbooks, implementation plans, and support procedures.
• Collaborate with business, application, infrastructure, security, vendor, and managed services teams to deliver stable and supportable solutions
• Build and maintain automation using tools like PowerShell, Azure CLI, Terraform, Bicep, Git, and Azure DevOps.
• Develop reusable automation for provisioning, patching, configuration management, compliance checks, health validation, certificate lifecycle, access reviews, and decommissioning.
• Maintain code in source control and apply peer review, documentation, versioning, and testing practices to infrastructure automation.
• Identify repetitive manual work and replace it with reliable, supportable automation.
• Automation, Infrastructure-as-Code, and DevOps Practices
• Build and maintain automation using tools like PowerShell, Azure CLI, Terraform, Bicep, Git, and Azure DevOps.
• Develop reusable automation for provisioning, patching, configuration management, compliance checks, health validation, certificate lifecycle, access reviews, and decommissioning.
• Maintain code in source control and apply peer review, documentation, versioning, and testing practices to infrastructure automation.
• Identify repetitive manual work and replace it with reliable, supportable automation.

• Bachelor’s degree in computer science, Information Technology, Engineering, or equivalent experience.
• 7+ years of hands-on Windows systems engineering, platform engineering, infrastructure engineering, or cloud engineering experience in enterprise production environments.
• Strong experience with Windows Server 2016, 2019, 2022, and/or 2025 in mission-critical environments.
• Strong experience with Active Directory Domain Services, Group Policy, DNS, DHCP, DFS, IIS, RDS, certificate services, and core Microsoft infrastructure services.
• Experience with Microsoft Entra ID / Azure AD, identity synchronization, conditional access, privileged access, authentication, authorization, and identity lifecycle controls.
• Experience supporting Microsoft 365, including Exchange Online, SharePoint Online, Teams, OneDrive, tenant governance, and collaboration-platform administration.
• Strong experience with VMware vSphere, including vCenter, ESXi, HA/DRS clusters, templates, and virtual machine lifecycle management.
• Strong experience with enterprise storage systems as connected to the on-premises virtualization stack, utilized for unstructured data storage, and enterprise backup repositories. (Examples: Pure, Exagrid)
• Experience with Azure infrastructure services, including VMs, virtual networks, storage accounts, backup, monitoring, governance, and hybrid connectivity.
• Strong experience PowerShell scripting experience for automation, reporting, configuration management, and operational tooling.
• Experience with enterprise backup/recovery platforms, especially Veeam Backup & Replication and Veeam ONE.