{"id":3290461,"url":"https://alion.io/job/gresham-technologies-cloud-windows-infrastructure-engineer","title":"Cloud Windows Infrastructure Engineer","company":{"id":172249,"name":"Gresham Technologies","domain":"greshamtech.com","url":"https://alion.io/company/gresham-technologies","size_band":null,"is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":null,"truth_index":null},"role":"DevOps","role_family":"DevOps","seniority":null,"employment_type":"full_time","work_mode":"remote","remote_scope":"stated_countries","remote_scope_basis":"inferred_payroll_markers","remote_working_hours":{"label":"UTC-8 – UTC-5","utc_offset_min":-8,"utc_offset_max":-5},"hiring_geo_confidence":"inferred","locations":[],"countries":[],"hiring_countries":["IN"],"hiring_countries_total":1,"salary":null,"salary_estimate":null,"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Active Directory","optional":false},{"name":"Amazon CloudWatch","optional":false},{"name":"Amazon EC2","optional":false},{"name":"AWS","optional":false},{"name":"Azure","optional":false},{"name":"DHCP","optional":false},{"name":"DNS","optional":false},{"name":"Grafana","optional":false},{"name":"IAM","optional":false},{"name":"ITIL","optional":false},{"name":"LDAP","optional":false},{"name":"Linux","optional":false},{"name":"Microsoft Entra ID","optional":false},{"name":"PKI","optional":false},{"name":"PowerShell","optional":false},{"name":"Windows","optional":false},{"name":"Windows Server","optional":false}],"status":"live","first_seen_at":"2026-10-22T19:31:35Z","employer_posted_date":null,"last_verified_at":"2026-10-22T19:31:35Z","board_verified":false,"closed_at":null,"days_open":9,"trust":{"level":"not_scored","repost_count":null,"flags":[],"days_open":9},"description":"Job Purpose\nAs Senior Windows Infrastructure Engineer, you are the technical anchor for the Windows estate that powers Gresham's managed services platform — a multi-client environment hosted on AWS. The work is grounded in deep Windows Server operations: Active Directory, IIS, hybrid identity, Group Policy, PowerShell, certificate services, and the wider Microsoft ecosystem.\n\nAWS is the platform on which all of this runs. Comfort with the cloud layer matters and you will operate it daily, but it is the Microsoft stack — and its operational nuance — that defines this role. We hire for deep Windows expertise first; the cloud layer is something a strong sysadmin can absorb.\n\nThe estate is Windows Server 2019 and above, end-to-end. Linux footprint is negligible — this is a role for someone who wants to go deep on the Microsoft stack rather than be spread thin across platforms.\n\nThis is a 100% individual contributor role. You will not manage or lead a team. You will own complex incidents end-to-end, set technical standards by example, and act as the senior escalation point for the Cloud Support function. You will be working US hours so please only apply if you are able to do so.\n\nRole Responsibilities\nLead resolution of complex Windows Server incidents across multi-client, AWS-hosted environments — from triage to root cause to remediation.\n\nAdminister and harden Windows Server 2019/2022/2025: Active Directory (forest/domain design, replication, FSMO, GPOs, trusts), DNS, DHCP, IIS, WSUS, AD CS, file & print services.\n\nOperate hybrid identity: AD on-prem ↔ AWS Managed Microsoft AD, federation with Entra ID (Azure AD) / AD FS, SAML / OIDC / OAuth, Kerberos, MFA.\n\nAuthor and maintain PowerShell automation: bulk administration, scheduled tasks, configuration drift correction, reporting, and DSC where appropriate.\n\nOperate the AWS hosting layer for Windows workloads: EC2, EBS, VPC, IAM, Route 53, CloudWatch, Systems Manager (Patch Manager, Session Manager, Run Command), Backup, Directory Service.\n\nManage IIS in depth: sites, application pools, bindings, ARR / URL Rewrite, SSL/TLS, failed request tracing, and performance tuning.\n\nDrive observability of the Windows estate: event log strategy, performance baselines, CloudWatch metrics & alarms, Grafana dashboards.\n\nAuthor runbooks, SOPs, and knowledge base articles to codify operational standards.\n\nParticipate in ITIL incident, problem, and change management; act as senior on-call escalation.\n\nEssential Skills & Experience\nWindows Server & Microsoft Infrastructure (Primary)\n7+ years operating Windows Server in production, with deep hands-on experience on Windows Server 2019 and above.\n\nActive Directory at depth: forest/domain design, replication, FSMO roles, trusts, sites & services, schema, tombstone & recovery.\n\nGroup Policy at scale: design, troubleshooting (RSoP, gpresult), security baselines, WMI filtering.\n\nIIS at depth: site & app pool configuration, ARR, URL Rewrite, SSL/TLS, failed request tracing, performance tuning.\n\nDNS, DHCP, WSUS, and Active Directory Certificate Services (AD CS) — real operational experience.\n\nAdvanced PowerShell: scripting, modules, remoting, error handling, automation patterns, DSC familiarity.\n\nWindows patching at scale: planning, deployment, rollback, and troubleshooting in regulated environments.\n\nWindows performance troubleshooting: PerfMon, ETW, memory dump analysis, IIS request diagnostics.\n\nIdentity & Authentication\nHybrid identity: AD on-prem ↔ cloud, Entra ID (Azure AD) Connect / federation, AD FS.\n\nSAML 2.0, OIDC, OAuth 2.0, Kerberos, LDAP, MFA — practical implementation and troubleshooting.\n\nCertificate management and PKI in enterprise Windows environments.\n\nAWS Hosting Platform (Operational Competence)\nDay-to-day comfort operating Windows workloads in AWS: EC2, EBS, VPC, IAM, Route 53, CloudWatch.\n\nAWS Systems Manager for Windows fleet management: Patch Manager, Session Manager, Run Command, State Manager, Parameter Store.\n\nAWS Directory Service / Managed Microsoft AD / AD Connector.\n\nNote:Deep AWS architect-level expertise is not required. We hire for Windows depth; the cloud layer is the platform, and we expect strong fundamentals plus willingness to grow.\nService Operations & Remote Working\nStrong ITIL grounding: incident, problem, change, and service lifecycle management.\n\nPrior experience in an MSP or shared-services environment — multiple client estates managed under SLA.\n\nAdvanced / fluent professional English, written and spoken.\n\nReliable, distraction-free home office with stable broadband (100 Mbps+ recommended), reliable power, and a professional video setup.\n\nAbility to work New York-aligned hours consistently, with the same presence and responsiveness as an office-based colleague.\n\nWorking Hours, Remote Setup & Engagement\nThis role is 100% remote and 100% individual contributor. To match the responsiveness of an office-based engineer:\n\nWorking hours:You will operate aligned to New York business hours (08:30–17:30 ET). Typical Brazil hours: 09:30–18:30 BRT during EDT (US summer) and 10:30–19:30 BRT during EST (US winter). You must be online, responsive, and actively engaged throughout core hours, the same as if you were sat with the team in the office.\n\nHome office:Quiet, ergonomic workspace with stable broadband (100 Mbps+ recommended), reliable power, and a professional video / audio setup. This is not a digital-nomad role.\n\nEngagement model:PJ (Pessoa Jurídica) or via Employer of Record — confirmed during recruitment. Tax, invoicing, and benefits arrangements discussed at offer stage.\n\nEquipment & expenses:Discussed at offer stage.\n\nOn-call:Participation in a senior escalation rota for major incidents — compensated in line with policy.\n\nEqual Opportunities Statement\nAt Gresham, we are committed to building a diverse and inclusive workforce that reflects the communities we serve. We actively encourage applications from individuals of all backgrounds and are dedicated to providing a workplace where everyone feels valued, respected and supported.\n\nWe make employment decisions based on merit, skills and potential, and do not discriminate based on any protected characteristic. We are also committed to making reasonable adjustments throughout the recruitment process and employment lifecycle.Originally posted on Himalayas","description_format":"text","description_chars":6330,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["Home office"],"hiring_locations":[{"name":"India","iso":"IN","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Financial Software & Embedded Finance"],"lifecycle":[{"event":"open","at":"2026-10-26T19:11:04Z"}],"visa":[{"country":"GB","licensed_sponsor":true,"evidence":"Licensed UK visa sponsor (Skilled Worker)","filings_12m":null,"filings_prev_12m":null,"green_card_filings_12m":null,"median_offered_wage_usd":null,"route":"Skilled Worker","cap_exempt":false,"checked_at":"2026-10-31T06:23:40+00:00","sources":["UK Home Office: register of licensed sponsors (workers)"],"filings_for_role_12m":0}],"liveness":{"score":80,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.799,"p_room":1,"age_days":8,"expected_fill_days":27,"reasons":["seen:8","win:early"],"computed_at":"2026-10-31T05:58:55Z"},"pay":null,"html_url":"https://alion.io/job/gresham-technologies-cloud-windows-infrastructure-engineer","json_url":"https://alion.io/job/gresham-technologies-cloud-windows-infrastructure-engineer.json","meta":{"generated_at":"2026-11-01T00:49:24Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":1429,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-02T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":172249},"rest":"https://alion.io/mcp/rest/get_company?id=172249"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fgresham-technologies-cloud-windows-infrastructure-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fgresham-technologies-cloud-windows-infrastructure-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fgresham-technologies-cloud-windows-infrastructure-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/gresham-technologies-cloud-windows-infrastructure-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fgresham-technologies-cloud-windows-infrastructure-engineer"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3290461}},{"tool":"search_jobs","arguments":{"company":"greshamtech.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3290461},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}