Infrastructure Engineer (Windows & Cloud)

A.    Windows Server Administration  (Primary) • Administer and maintain Windows Server environments including security and performance monitoring. • Manage server provisioning, decommissioning, and lifecycle activities in alignment with change management policies. • Troubleshoot system-level issues, review event logs, and perform root-cause analysis for recurring incidents. • Maintain system hardening standards and ensure compliance with security policies and audit requirements. • Coordinate scheduled maintenance windows including patching cycles, restarts, and capacity adjustments. B.  Active Directory & Identity Services  (Primary) • Administer and maintain Active Directory Domain Services (AD DS) including user and group management, Group Policy Objects (GPOs), Organizational Units (OUs), and trust relationships. • Support DNS and AD-integrated services to ensure directory health and name resolution continuity. • Conduct periodic AD health checks, replication monitoring, and audits of privileged access accounts. • Collaborate with the security team to enforce least-privilege access principles and manage privileged identity workflows (e.g., CyberArk or equivalent PAM tools). • Support onboarding and off boarding processes by executing access provisioning and de-provisioning in accordance with approved procedures. C.  Cloud Platform Operations — Azure &AWS  (Primary) • Perform day-to-day operational management of cloud resources including Virtual Machines, storage accounts, virtual networks, and IAM roles/policies. • Monitor cloud workload health using native platform tools (Azure Monitor, AWS CloudWatch) and escalate anomalies per defined SLAs. • Manage cloud resource tagging, cost visibility reporting, and contribute to FinOps practices to prevent cloud spend overruns. • Apply cloud security baseline configurations • Participate in cloud migration and onboarding activities, including infrastructure readiness assessments and post-migration validation. D.  Infrastructure as Code (IaC)  • Maintain and update existing Terraform templates for infrastructure provisioning. • Perform modifications to IaC scripts under the guidance of senior engineers or architects, including variable updates, module adjustments, and plan/apply cycles. • Maintain version control disciplines to align best security practices. • Participate in infrastructure drift detection and remediation activities to ensure deployed resources match approved configurations. Overall Experience • 4–7 years for Windows Server and Active Directory administration. • 2–4 years of operational cloud experience across Azure and/or AWS. • Demonstrated ability to independently manage operational tasks with minimal supervision. • Windows Server 2016/ 2019 / 2022 administration • OS patching via WSUS or Microsoft Update Management • Performance monitoring: Task Manager, PerfMon, Resource Monitor • Server roles: IIS, File Services, DNS, DHCP • Event Log analysis and incident triage • Local and domain Group Policy configuration • Minimum 4 years of hands-on experience in IT infrastructure operations. • Proven track record in a hybrid environment (on premises + cloud). • Experience in a structured IT operations team, ideally within government, statutory board, or large enterprise. • AD DS: Users, Groups, OUs, GPO management • AD replication, FSMO roles, and site topology awareness • DNS and DHCP within AD-integrated environments • AD health and audit tools (DCDiag, Repadmin, ADSIEdit) • Privileged Access Management (PAM) concepts; CyberArk exposure is an advantage (IaC / Automation) • 1–3 years of exposure to Terraform or equivalent IaC tooling. • Ability to read, understand, and make guided modifications to existing IaC code. • Practical PowerShell scripting experience of at least 2–3 years.