Senior Windows Infrastructure Design Engineer (L3/L3.5)

About the Role

We are seeking an experienced Windows Infrastructure Design Engineer to join our Infrastructure Engineering team. This role is responsible forthe architecture, engineering, governanceand highest-level technical support (L3/L3.5) of the organisation's Windows Server, Active Directory and identity infrastructure across datacentre, cloudand hybrid environments.

The successful candidate will be a senior technical authority for Microsoft server and identity technologies, providing design leadership, operational governanceand engineering expertise. The role combines deep Windows and Active Directory knowledge with experience of Privileged Access Management (PAM), automationand modern infrastructure management practices.

The engineer will play a key role in modernising infrastructure services, improving security posture, driving automationand supporting large-scale transformation initiatives across the enterprise estate.

Key Responsibilities

• Design, implement and maintainenterprise Windows Server infrastructure and associated platform services.

• Own the architecture and governance of Active Directory Domain Services (AD DS), including domain, forest, trustand replication design.

• Design and support Microsoft DNS services hosted on domain controllers and integrated with Active Directory.

• Define and maintainstandards, reference architectures and operational processes for Windows and identity services.

• Act as the L3/L3.5 escalation point for complex Windows, Active Directoryand authentication-related issues.

• Design and support enterprise identity and access management solutions, including integration with PAM platforms.

• Develop and implement security hardening standards in line with industry best practices.

• Collaborate with security, networking, cloudand application teams to deliver resilient and secure infrastructure services.

• Design and implement automation solutions using scripting, Infrastructure as Code and API-driven management.

• Leverage AI-assisted tooling to improve operational efficiency, troubleshooting, reportingand knowledge management.

• Provide technical leadership for infrastructure transformation, cloud migrationand service modernisation programmes.

Required Experience

• Extensive experience designing and supporting Microsoft Windows Server environments.

• Strong expertisein Active Directory Domain Services, including:

• Forest and domain design

• Group Policy

• Sites and services

• DNS integration

• Trust relationships

• Replication

• Authentication services

• Strong understanding of Microsoft DNS, DHCP and certificate services.

• Experience supporting hybrid identity environments incorporating Active Directory and Microsoft Entra ID.

• Experience with Privileged Access Management (PAM) solutions and privileged account controls.

• Strong understanding of authentication technologies including Kerberos, LDAP, NTLM and modern identity protocols.

• Experience with Windows security hardening and vulnerability remediation.

• Experience with PowerShell automation and configuration management.

• Strong troubleshooting and root-cause analysis capability across complex enterprise environments.

• Experience supporting highly availableand business-critical infrastructure services.

Desirable Experience

• CyberArk, Delinea, BeyondTrustor similar PAM platforms.

• Microsoft Entra ID, Entra Connect and hybrid identity architectures.

• Windows Failover Clustering.

• Remote Desktop Services (RDS).

• Microsoft PKI and certificate lifecycle management.

• VMware, Nutanix or cloud-hosted Windows environments.

• Configuration management platforms such as Ansible, DSCor SCCM.

• Monitoring platforms such as SolarWinds, SCOM, Grafana or Prometheus.

• Experience applying AI technologies to infrastructure operations and service management.

Key Attributes

• Deep technical expertisein Windows and identity technologies.

• Strong designand architecture capability.

• Security-first mindset.

• Excellent problem-solving and troubleshooting skills.

• Automation-oriented approach to service management.

• Strong documentation and governance discipline.

• Ability to lead technical standards and engineering best practices.

• Strong communicationand stakeholder management skills.

Success Measures

• Availability and resilience of Windows and Active Directory services.

• Security and compliance of identity infrastructure.

• Reduction in operational effort through automation.

• Successful delivery of infrastructure transformation initiatives.

• Quality of technical standards, documentationand governance.

• Reduction in recurring incidents and identity-related operational risks.

This role providesthe opportunity to own and evolve the core Windows and identity platforms that underpin a global enterprise environment, combining deep technical engineering with modern automation, securityand privileged access management practices.