{"id":4077422,"url":"https://alion.io/job/acquire-intelligence-l3-windows-administrator","title":"L3 Windows Administrator","company":{"id":4418402,"name":"Acquire Intelligence","domain":"acquire.ai","url":"https://alion.io/company/acquire-4","size_band":"201-500","is_staffing_agency":false,"employer_type":"services","is_intermediary":false,"listed_via":null,"ats_vendor":"Workday","truth_index":{"grade":"B","score":75,"open_postings":6,"ghost_share":0,"stale_share":1,"repost_share":0,"time_to_fill_p50_days":35,"computed_at":"2026-11-11T05:49:22Z"}},"role":"DevOps","role_family":"DevOps","seniority":"middle","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Melbourne, Australia"],"countries":["AU"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":null,"experience_years_min":3,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Active Directory","optional":false},{"name":"Azure","optional":false},{"name":"Copilot","optional":false},{"name":"DHCP","optional":false},{"name":"DNS","optional":false},{"name":"HIPAA","optional":false},{"name":"Hyper-V","optional":false},{"name":"ITIL","optional":false},{"name":"Lighthouse","optional":false},{"name":"Microsoft Entra ID","optional":false},{"name":"OneDrive","optional":false},{"name":"PCI DSS","optional":false},{"name":"PowerShell","optional":false},{"name":"SharePoint","optional":false},{"name":"SIEM","optional":false},{"name":"SOC 2","optional":false},{"name":"TCP/IP","optional":false},{"name":"VMWare","optional":false},{"name":"VPN","optional":false},{"name":"Wi-Fi","optional":false},{"name":"Windows","optional":false},{"name":"Windows Server","optional":false},{"name":"Bicep","optional":true},{"name":"CI/CD","optional":true},{"name":"Microsoft Sentinel","optional":true},{"name":"Terraform","optional":true}],"status":"live","first_seen_at":"2026-11-11T15:55:20Z","employer_posted_date":"2026-11-11","last_verified_at":"2026-11-11T15:55:20Z","board_verified":true,"closed_at":null,"days_open":0,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":0},"description":"We’re an award-winning global outsourcer providing contact center and back office services on behalf of our global clients. Come work at a place where innovation and teamwork come together to support the most exciting missions in the world!\nPosition title\nLevel 3 Windows Engineer\nLocation\nMelbourne, Victoria\nJob family\nInformation Technology, Infrastructure and End-User Computing\nSupport tier\nLevel 3, internal escalation\nReports to\n[To be confirmed]\nEmployment\nFull Time\nScope\nInternal operations and managed services clients\n1. About Acquire Intelligence\nAcquire Intelligence™ delivers managed IT services and business process outsourcing to clients across Australia and internationally, through delivery teams in Australia and the Philippines.\nOur managed services team supports several large clients alongside our own operations. The same engineers run our estate and our clients’ environments: more than 10,000 systems across multiple sites, multiple Active Directory forests and multiple Microsoft 365 tenants. Clients expect contracted service levels to be met, new users and sites to be live on the agreed date, and every outage to be handled as if it were our own business at stake. The business operates under PCI DSS, ISO/IEC 27001, SOC 1, SOC 2 and HIPAA, so every control on the Microsoft estate has to hold up in front of an auditor. That is the environment this role is built for.\n2. The Role\nThe Level 3 Windows Engineer is the senior technical authority for the Microsoft estate at Acquire Intelligence, from the agent’s desktop to the domain controller to the Azure subscription. When Level 1 and Level 2 have exhausted their options, this role takes the problem, finds the cause and removes it permanently.\nThis is not a ticket-queue role. We want an engineer who sees problems through across the whole stack, makes sound decisions without waiting to be told, automates anything done twice, and leaves every environment more secure, better documented and easier to support than they found it. The role has broad autonomy and is expected to use it.\nThe position carries three equal weights: end-user computing for internal staff, contact centre agents and client users; on-premises infrastructure that is still the backbone of several sites; and cloud and hybrid identity across Microsoft 365, Entra ID and Azure. Depth in all three is the requirement, not a preference.\n3. Key Responsibilities\n3.1 End-user computing\n\n Engineer and maintain Windows 11 standard operating environments for Acquire Intelligence and client environments, including build standards, Autopilot provisioning, Intune configuration and compliance policy, and co-management where ConfigMgr remains in use.\n\n Package, deploy and maintain applications (Win32, MSIX and Store) and run update rings for Windows, Microsoft 365 Apps and drivers with defined pilot, validation and rollback stages.\n\n Engineer agent workstations, shared and kiosk devices for contact centre operations.\n\n Design and support physical desktop deployments for onshore and offshore staff, including image management, profiles, scaling, proactive maintenance and performance.\n\n Deliver rapid, repeatable device provisioning so client onboardings, new sites and ramp-ups go live on schedule without manual rebuilds.\n\n Advance the end-to-end endpoint automation strategy, moving toward zero-touch delivery across the full device lifecycle: Autopilot enrolment, configuration, application deployment, patching, compliance remediation and retirement, using Intune, PowerShell and Microsoft Graph to remove manual effort at every stage.\n\n Enforce endpoint security baselines: BitLocker, Windows LAPS, Defender for Endpoint, attack surface reduction rules and application control.\n3.2 On-premises infrastructure\n\n Engineer and administer Active Directory Domain Services across a multi-site, multi-forest environment, including trusts, sites and services, replication health, Group Policy, DNS and DHCP.\n\n Lead domain controller and Windows Server lifecycle work: in-place and side-by-side upgrades, promotion, decommissioning and full dependency analysis before any legacy server is retired.\n\n Engineer and maintain the virtualisation, storage and file services layer (Hyper-V and/or VMware, DFS, file server permissions), and Active Directory Certificate Services where in use.\n\n Manage backup and recovery for Windows workloads: verify that backups complete, restores work and recovery objectives are met through scheduled restore and disaster recovery testing.\n\n Diagnose complex faults using low-level Windows tooling, including event tracing, performance counters, Sysinternals, network captures and memory dumps.\n3.3 Cloud, hybrid identity and Microsoft 365\n\n Engineer hybrid identity across Active Directory and Microsoft Entra ID, including Entra Connect or Cloud Sync, hybrid join, Conditional Access, multi-factor authentication, Privileged Identity Management and role-based access control.\n\n Administer Azure infrastructure supporting Windows workloads: virtual machines, virtual networks, network security groups, site-to-site connectivity, storage, Azure Backup, Azure Arc, Update Manager and Azure Monitor.\n\n Act as the Level 3 authority for Exchange Online, SharePoint Online, Teams and OneDrive, including complex mail flow, hybrid Exchange, permissions, retention and licensing issues.\n\n Lead Windows workload migrations to Azure and recommend secure, supportable and cost-aware designs.\n\n Prepare the Microsoft 365 estate for AI tooling such as Microsoft 365 Copilot by fixing permissions hygiene, applying sensitivity labels and scoping app consent so AI features expose only what users are entitled to see.\n3.4 Security hardening and compliance\n\n Design and implement hardening standards across identity, servers and endpoints, aligned to the control requirements of PCI DSS, ISO/IEC 27001, SOC 1, SOC 2 and HIPAA, and to Microsoft security baselines.\n\n Implement and maintain a tiered administration model, remove standing privilege, and retire legacy protocols and configurations including NTLMv1, SMBv1, RC4 Kerberos encryption and unconstrained delegation.\n\n Implement and maintain the Windows, identity and endpoint controls within the compliance program: access reviews, privileged access, patch compliance, logging and retention, encryption and change records, with audit evidence that is complete, accurate and ready when requested.\n\n Maintain segmentation and hardening for in-scope environments, including cardholder data environments for payment-handling contact centre operations and systems that process protected health information.\n\n Support internal and external audits as the technical authority for the Microsoft estate, and remediate findings within agreed timeframes.\n\n Drive vulnerability remediation to closure, and support security investigations and incident response by working with security and SIEM stakeholders on log analysis and containment.\n3.5 Managed services delivery\n\n Operate safely across multiple client tenants using delegated administration (GDAP), Microsoft 365 Lighthouse, RMM and PSA tooling, with strict separation between client environments.\n\n Lead the technical components of client onboarding and offboarding, including discovery, tenant-to-tenant and forest migrations, directory synchronisation and cutover planning.\n\n Deliver against client SLAs and contractual obligations, act as the technical lead with client stakeholders during major incidents, and contribute technical content to service reviews.\n\n Present changes to the change advisory board with clear risk, testing, rollback and communication plans.\n3.6 Automation, escalation and technical leadership\n\n Automate administration, provisioning, monitoring and reporting with PowerShell and Microsoft Graph, using source control and peer review for anything that runs in production.\n\n Act as the final internal escalation point for incidents across endpoints, servers, identity, Microsoft 365 and Azure, and see them through to resolution, including escalation to Microsoft and other vendors.\n\n Lead problem management: run root cause analysis, write post-incident reviews, and track permanent fixes to completion rather than accepting repeat incidents.\n\n Maintain accurate technical documentation, including build standards, runbooks, known errors and recovery procedures, written so a Level 2 engineer can follow them at 2am.\n\n Coach Level 1 and Level 2 engineers in Australia and the Philippines, review their technical work, and raise the capability of the team over time.\n4. Knowledge, Skills and Experience\n4.1 Essential\n\n Typically seven or more years in Windows infrastructure and end-user computing, including at least three years as a senior or Level 3 engineer in a managed service provider.\n\n Proven delivery across multiple client environments at once: working to contracted SLAs, handling client-facing escalations and maintaining strict separation between client tenants and credentials.\n\n Experience onboarding new managed services clients, including environment discovery, remediation of inherited technical debt and tenant-to-tenant or forest migrations.\n\n Experience operating and evidencing technical controls in an audited environment under PCI DSS, ISO/IEC 27001, SOC 2 or HIPAA.\n\n Expert knowledge of Active Directory, Group Policy, DNS, DHCP and Kerberos, including troubleshooting replication and authentication failures from first principles.\n\n Deep, hands-on Intune and Autopilot experience at scale, including application packaging and update management.\n\n Strong Windows Server engineering, virtualisation (Hyper-V and/or VMware) and backup and recovery experience.\n\n Proven Entra ID and hybrid identity experience, including Entra Connect, Conditional Access and privileged access management.\n\n Level 3 capability in Exchange Online and Microsoft 365 administration.\n\n Practical Azure IaaS administration experience, including networking and monitoring.\n\n Advanced PowerShell, including Microsoft Graph, with a track record of building automation others rely on.\n\n Working knowledge of TCP/IP, routing, VPN, firewalls and Wi-Fi sufficient to isolate network causes of Windows faults.\n\n Disciplined use of ITIL-aligned incident, problem, change and knowledge management practices.\n4.2 Desirable\n\n Migration tooling such as Quest On Demand Migration, BitTitan MigrationWiz or ShareGate.\n\n Microsoft CSP licensing and partner administration, and experience scoping and estimating client project work.\n\n Contributing technical content to client service reviews and technology roadmaps.\n\n Azure Virtual Desktop and FSLogix design and operations.\n\n Infrastructure as code (Bicep or Terraform) and CI/CD pipelines for configuration and automation.\n\n Defender XDR, Microsoft Sentinel or another SIEM at an investigation level.\n\n Experience preparing a Microsoft 365 tenant for Copilot or other AI platforms, including data governance and app consent.\n\n Exposure to contact centre environments, including CCaaS platforms such as Genesys Cloud, Amazon Connect or NICE CXone.\n4.3 How we expect you to work\nTechnical depth gets an engineer to Level 3. The behaviours below separate an engineer who closes tickets from one the business relies on.\nBehaviour\nWhat it looks like in practice\nSees it through\nTakes a problem from escalation to permanent fix without being chased, and closes the loop with the people affected.\nFixes causes, not symptoms\nTreats a repeat incident as a defect. Finds the root cause, removes it and documents it.\nCalm under pressure\nLeads a P1 methodically: stabilises service first, communicates clearly, then investigates.\nAutomates by default\nScripts a task the second time it comes up, not the tenth, and makes the script safe for others to run.\nProtects the estate\nWill challenge a risky change or an insecure shortcut, explain why, and offer a workable alternative.\nTranslates clearly\nExplains a Kerberos failure to an engineer and its business impact to a client...","description_format":"text","description_chars":15515,"description_truncated":true,"requirements":{"experience_years_min":3,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"phd","optional":false},"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Business Process Outsourcing (BPO)","Call Center Services","AI Consulting & Integration"],"lifecycle":[{"event":"open","at":"2026-11-11T15:55:20Z"}],"visa":[],"liveness":{"score":86,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.86,"p_room":1,"age_days":0,"expected_fill_days":35,"reasons":["conf:2","win:early"],"computed_at":"2026-11-11T18:50:37Z"},"pay":null,"html_url":"https://alion.io/job/acquire-intelligence-l3-windows-administrator","json_url":"https://alion.io/job/acquire-intelligence-l3-windows-administrator.json","meta":{"generated_at":"2026-11-11T18:50:37Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":36313,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-12T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.1,"usd":0.01,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":4418402},"rest":"https://alion.io/mcp/rest/get_company?id=4418402"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Facquire-intelligence-l3-windows-administrator"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":2,"usd":0.2},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Facquire-intelligence-l3-windows-administrator"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.1,"usd":0.01},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Facquire-intelligence-l3-windows-administrator"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/acquire-intelligence-l3-windows-administrator\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Facquire-intelligence-l3-windows-administrator"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":4077422}},{"tool":"search_jobs","arguments":{"company":"acquire.ai","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":4077422},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}