{"id":3416669,"url":"https://alion.io/job/eclerx-senior-windows-infrastructure-engineer-cloud-l2","title":"Senior Windows Infrastructure Engineer (Cloud L2)","company":{"id":7203,"name":"eClerx","domain":"eclerx.com","url":"https://alion.io/company/eclerx","size_band":"5000+","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Oracle","truth_index":{"grade":"C","score":66,"open_postings":199,"ghost_share":0.568,"stale_share":0,"repost_share":0,"time_to_fill_p50_days":37,"computed_at":"2026-10-30T05:48:23Z"}},"role":"DevOps","role_family":"DevOps","seniority":"senior","employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"explicit","locations":["Lima, Peru"],"countries":["PE"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":14500,"max_usd":40000,"period":"year","method":"global_role_cell_scaled_by_country","sample_n":3508},"experience_years_min":7,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Active Directory","optional":false},{"name":"Amazon CloudWatch","optional":false},{"name":"Amazon EC2","optional":false},{"name":"AWS","optional":false},{"name":"Azure","optional":false},{"name":"DHCP","optional":false},{"name":"DNS","optional":false},{"name":"Google SecOps","optional":false},{"name":"Grafana","optional":false},{"name":"IAM","optional":false},{"name":"ITIL","optional":false},{"name":"Jira","optional":false},{"name":"LDAP","optional":false},{"name":"Linux","optional":false},{"name":"Microsoft Entra ID","optional":false},{"name":"Okta","optional":false},{"name":"PKI","optional":false},{"name":"PowerShell","optional":false},{"name":"Splunk","optional":false},{"name":"Tanium","optional":false},{"name":"Windows","optional":false},{"name":"Windows Server","optional":false},{"name":"Wiz","optional":false},{"name":"Ansible","optional":true},{"name":"CI/CD","optional":true},{"name":"Git","optional":true},{"name":"Prometheus","optional":true},{"name":"Qualys Cloud Platform","optional":true},{"name":"SQL","optional":true},{"name":"Terraform","optional":true}],"status":"live","first_seen_at":"2026-10-28T14:15:15Z","employer_posted_date":"2026-10-28","last_verified_at":"2026-10-30T23:05:19Z","board_verified":true,"closed_at":null,"days_open":2,"trust":{"level":"ok","repost_count":0,"flags":["company_stale"],"days_open":2},"description":"Senior Windows Infrastructure Engineer (Cloud L2)\nLocation: Lima, Peru\nType: Full-time\nJob Summary\nThe Senior Windows Infrastructure Engineer is the technical anchor and senior escalation point for the Windows estate that powers the managed services platform, a multi-client environment hosted on AWS. The role owns complex incidents from triage through to root cause and fix, keeps the platform secure, patched and observable, and turns operational knowledge into runbooks and automation so that L1 can safely take on more of the routine work.\nThe work is grounded in deep Windows Server operations: Active Directory, IIS, hybrid identity, Group Policy, PowerShell, certificate services and the wider Microsoft ecosystem. The estate is Windows Server 2019 and above, end-to-end, with a negligible Linux footprint. AWS is the platform it all runs on and is operated daily, but it is the Microsoft stack that defines the role: we hire for deep Windows expertise first.\nResponsibilities\n Incident escalation and resolution: Take L1 escalations in Jira Service Management and own complex Windows Server and AWS incidents from triage to root cause to remediation, across multi-client, AWS-hosted environments (approx. 3 L1 escalations per week, alongside own queue and project work).\n Major incidents and on-call: Cover the Primary on-call rota for P1/P2 incidents (senior escalation rota for major incidents, compensated in line with policy), usually one week a month. Lead the technical response during P1s and give technical updates to the Incident Manager and SDMs.\n Problem management: Carry out root-cause analysis on repeat or major incidents, raise problem records and follow fixes through to closure (roughly 3 problem management tickets a week).\n Windows platform administration: Administer and harden Windows Server 2019/2022/2025: Active Directory (forest/domain design, replication, FSMO, GPOs, trusts), DNS, DHCP, WSUS, AD CS, certificates and PKI, and file and print services.\n Hybrid identity: Operate hybrid identity between on-premises AD and AWS Managed Microsoft AD, federation with Entra ID (Azure AD) and AD FS, SAML, OIDC, OAuth, Kerberos and MFA. Support identity projects such as the Okta/SSO migration.\nIIS management: Manage IIS in depth: sites, application pools, bindings, ARR / URL Rewrite, SSL/TLS, failed request tracing and performance tuning.\n AWS hosting layer: Operate the AWS hosting layer for Windows workloads day to day: EC2, EBS, VPC, IAM, Route 53, CloudWatch, Systems Manager (Patch Manager, Session Manager, Run Command), AWS Backup and Directory Service.\n Vulnerability remediation and patching: Fix critical Windows and third-party vulnerabilities following the documented seven-stage remediation process. Plan, deploy, roll back and troubleshoot Windows patching at scale. Fix Tanium and Wiz cloud findings (including AWS security group findings) and own the third-party runbooks. Activity carried out most weekends.\nObservability: Drive observability of the Windows estate: event log strategy, performance baselines, CloudWatch metrics and alarms, and Grafana dashboards.\n Platform projects and migrations: Build and test changes for estate-wide programmes, for example the security-stack migration (Google SecOps agents on 2,000+ servers in 5 AWS accounts), the Grafana agent rollout and the Splunk-to-Grafana migration, and OS upgrades. Write the runbook and hand the work over to L1 once it becomes BAU.\nAutomation: Write and maintain PowerShell and SSM automation for bulk administration, scheduled tasks, configuration drift correction and reporting, using DSC where appropriate.\n Changes: Plan, raise and carry out normal and emergency changes. Present them at the Cloud CAB and cover the Secondary (planned change) on-call rota, usually one week a month.\nKnowledge and L1 coaching: Write runbooks, SOPs and knowledge articles to codify operational standards. Run the daily ticket clinic with L1 and act as buddy for new L1 starters.\nEligibility Requirements\n7+ years operating Windows Server in production, with deep hands-on experience on Windows Server 2019 and above\nActive Directory at depth: forest/domain design, replication, FSMO roles, trusts, sites and services, schema, tombstone and recovery\nGroup Policy at scale: design, troubleshooting (RSoP, gpresult), security baselines, WMI filtering\nIIS at depth: site and app pool configuration, ARR, URL Rewrite, SSL/TLS, failed request tracing, performance tuning\nDNS, DHCP, WSUS and Active Directory Certificate Services (AD CS): real operational experience; certificate management and PKI in enterprise Windows environments\nAdvanced PowerShell: scripting, modules, remoting, error handling, automation patterns, DSC familiarity\nWindows patching and vulnerability remediation at scale in regulated environments: planning, deployment, rollback and troubleshooting\nWindows performance troubleshooting: PerfMon, ETW, memory dump analysis, IIS request diagnostics\nHybrid identity: AD on-premises ↔ cloud, Entra ID (Azure AD) Connect / federation, AD FS; practical implementation and troubleshooting of SAML 2.0, OIDC, OAuth 2.0, Kerberos, LDAP and MFA\nDay-to-day operation of Windows workloads on AWS: EC2, EBS, VPC, IAM, Route 53, CloudWatch; Systems Manager (Patch Manager, Session Manager, Run Command, State Manager, Parameter Store); AWS Directory Service / Managed Microsoft AD / AD Connector. Deep AWS architect-level expertise is not required.\nStrong ITIL grounding (incident, problem, change and service lifecycle management); prior experience in an MSP or shared-services environment managing multiple client estates under SLA; owns problems through to resolution\nAdvanced / fluent professional English, written and spoken\nAble to work New York-aligned hours consistently, from a reliable, distraction-free home office with stable broadband (100 Mbps+ recommended), reliable power and a professional video and audio setup\nNice to HaveGrafana/Prometheus, Splunk, Tanium, Wiz, Qualys\nSQL Server on Windows; Terraform or Ansible; Git and CI/CD\nExperience supporting financial services clients\nAZ-800/801, SC-300, AWS SysOps or Solutions Architect Associate, ITIL 4 Foundation\n\nHow to Apply\nClick \"Apply Now\" to submit your resume through our career site\nBe sure to include any relevant experience that aligns with the role.\nQualified candidates will be contacted by a member of our recruitment team for next steps\nAbout eClerx\neClerx is a leading provider of productized services, bringing together people, technology and domain expertise to amplify business results.\nThe firm provides business process management, automation, and analytics services to a number of Fortune 2000 enterprises, including some of the world’s leading financial services, communications, retail, fashion, media & entertainment, manufacturing, travel & leisure, and technology companies. Incorporated in 2000, eClerx is traded on both the Bombay and National Stock Exchanges of India. The firm employs more than 19,000 people across Australia, Canada, France, Germany, Switzerland, Egypt. India, Italy, Netherlands, Peru, Philippines, Singapore, Thailand, the UK, and the USA.\nFor more information, visit www.eclerx.com\nYou can also find us on:\nhttps://www.linkedin.com/company/eclerx/\nhttps://www.indeed.com/cmp/Eclerx/about\nhttps://www.glassdoor.com/eClerx\neClerx is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, disability or protected veteran status, or any other legally protected basis, in accordance with applicable law. We are also committed to protecting and safeguarding your personal data. Please find our policy here","description_format":"text","description_chars":7729,"description_truncated":false,"requirements":{"experience_years_min":7,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[{"language":"English","level":"All levels","optional":false}]},"benefits":["Home office"],"hiring_locations":[{"name":"Peru","iso":"PE","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["IT Consulting & Digital Transformation","Business Process Outsourcing (BPO)","AI Consulting & Integration","Analytics & BI Consulting"],"lifecycle":[{"event":"open","at":"2026-10-28T19:38:56Z"}],"visa":[],"liveness":{"score":63,"band":"ok","label":"Likely open","p_open":1,"p_active":0.632,"p_room":1,"age_days":1,"expected_fill_days":37,"reasons":["conf:3","stale_co","velocity","win:early","comp:brand"],"computed_at":"2026-10-30T05:48:23Z"},"pay":null,"html_url":"https://alion.io/job/eclerx-senior-windows-infrastructure-engineer-cloud-l2","json_url":"https://alion.io/job/eclerx-senior-windows-infrastructure-engineer-cloud-l2.json","meta":{"generated_at":"2026-10-31T01:21:23Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":1801,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-01T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":7203},"rest":"https://alion.io/mcp/rest/get_company?id=7203"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Feclerx-senior-windows-infrastructure-engineer-cloud-l2"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Feclerx-senior-windows-infrastructure-engineer-cloud-l2"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Feclerx-senior-windows-infrastructure-engineer-cloud-l2"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/eclerx-senior-windows-infrastructure-engineer-cloud-l2\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Feclerx-senior-windows-infrastructure-engineer-cloud-l2"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3416669}},{"tool":"search_jobs","arguments":{"company":"eclerx.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3416669},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}