{"id":1368560,"url":"https://alion.io/job/westinghouse-nuclear-principal-engineer-platform-services","title":"Principal Engineer - Platform Services","company":{"id":1796470,"name":"Westinghouse Electric Company","domain":"westinghousenuclear.com","url":"https://alion.io/company/westinghousenuclear","size_band":"5000+","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"SuccessFactors","truth_index":{"grade":"A","score":100,"open_postings":7,"ghost_share":0,"stale_share":0,"repost_share":0,"time_to_fill_p50_days":25,"computed_at":"2026-10-24T06:02:35Z"}},"role":"Backend","role_family":"Backend","seniority":"lead","employment_type":null,"work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Kraków, Poland"],"countries":["PL"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":13916,"max":17350,"currency":"PLN","period":"month","gross":true,"usd_annual":54624},"salary_estimate":null,"experience_years_min":5,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Active Directory","optional":false},{"name":"Azure","optional":false},{"name":"DHCP","optional":false},{"name":"DNS","optional":false},{"name":"ITIL","optional":false},{"name":"LDAP","optional":false},{"name":"Microsoft Entra ID","optional":false},{"name":"PKI","optional":false},{"name":"PowerShell","optional":false},{"name":"Windows","optional":false},{"name":"Windows Server","optional":false},{"name":"Zero Trust","optional":false}],"status":"live","first_seen_at":"2026-09-15T07:00:00Z","employer_posted_date":"2026-09-15","last_verified_at":"2026-10-24T04:24:56Z","board_verified":true,"closed_at":null,"days_open":39,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":39},"description":"Are you interested in being part of an innovative team that supports Westinghouse's mission to provide clean energy solutions? At Westinghouse, we recognize that our employees are our most valuable asset and we seek to identify, attract and recruit the most qualified talent while recognizing and encouraging the value of diversity in the global workplace.\nReporting to the Platform Services Supervisor (Wintel), the Principal Engineer - Platform Services focuses on Active Directory. As the senior hands-on technical authority, you will oversee engineering, securing, and maintaining the enterprise Active Directory and Windows identity platforms. You will provide deep technical expertise across AD DS, Azure AD/Entra ID, Group Policy, DNS/DHCP, PKI, Tier-0/Tier-1 privileged infrastructure, and directory-integrated authentication services.\nOperating within a Plan-Build-Run model, the Principal Engineer designs, implements, and improves Active Directory and identity services setting technical standards through practice and execution.\nYou will focus on delivering secure, scalable, and reliable directory solutions while reducing technical debt, modernizing legacy components, and ensuring platforms are supportable at global scale.\nResponsibilities:\nTechnical Leadership & Oversight\nPartner with global resources on global architecture, engineering, and lifecycle management of:\nActive Directory Domain Services (AD DS) forests and domains\n\nAzure AD/Entra ID hybrid identity\n\nGroup Policy (GPO) architecture and governance\n\nDNS, DHCP, WINS (where applicable)\n\nEnterprise PKI and certificate services\n\nAD replication, site topology, and domain controller placement\n\nAuthentication and federation services\n\nDevelop and maintain global standards for AD security, domain hardening, Tier-0 controls, and privileged access.\n\nProvide engineering oversight for AD lifecycle management, ensuring consistent implementations, modernization alignment, and technical debt reduction.\n\nDesign and maintain hybrid identity integrations between on-prem and cloud services.\n\nIdentify architectural risks, systemic constraints, and long-term scalability gaps, driving efforts to eliminate them.\n\nStrategic Engineering & Modernization\nGuide enterprise identity modernization programs, translating strategic goals into concrete engineering solutions, including:\nLegacy GPO, DNS, and domain topology rationalization\n\nDevelop processes for Domain controller OS upgrades and AD platform standardization across the enterprise.\n\nLead the decommissioning of obsolete or insecure protocols aligned with CIS baselines.\n\nPromote the use of modern authentication standards, Conditional Access, and MFA patterns.\n\nEstablish future-state identity architectures that align with zero-trust principles, cloud adoption, and evolving security requirements.\n\nStakeholder & Cross-Functional Collaboration\nBe a primary subject matter expert for Active Directory services across infrastructure, security, cloud, and application teams.\n\nCollaborate with security teams on future identity governance projects.\n\nPartner with Build teams to ensure new systems follow identity standards and are supportable.\n\nPartner with application teams to standardize AD-integrated services, LDAP usage and service account models according to enterprise identity architecture.\n\nSupport audit, compliance, and risk teams by providing evidence and technical expertise for identity controls.\n\nRepresent Active Directory interests in enterprise project planning, architecture reviews, and change advisory boards.\n\nQualifications:\nBS in Information Systems or similar degree or equivalent experience\n\n5+ years experience in varying IT infrastructure or application roles with at least 3 years dedicated to Active Directory engineering.\n\nStrong PowerShell automation experience.\n\nProven ability to collaborate within a global team of IT infrastructure engineers.\n\nExperience diagnose and resolve complex, multi-layer identity issues.\n\nDemonstrated experience in defining engineering standards and long-term strategies.\n\nStrong ownership mindset with deep experience operating Tier-0 critical services\n\nExperience in working effectively in highly complex, global environments.\nAdvanced knowledge of at least 4 of the following areas:\nActive Directory architecture, trusts, replication, sites, and security\n\nAzure AD/Entra ID hybrid identity\n\nAuthentication protocols such as Kerberos, NTLM, LDAP, SAML, OAuth, etc.\n\nGPO design, delegation, and configuration management\n\nDNS/DHCP architecture within enterprise AD ecosystems\n\nPKI certificate services and certificate lifecycle management\n\nCertificates:\nITIL Foundations (Preferred)\n\nWindows Server Hybrid Administrator\n\nIdentity & Access Administrator\n\nAzure Administrator or Architect\n\nWe are committed to transparency and equity in all of our people practices. The base salary range for this position, which is dependent upon experience, qualifications and skills, is estimated to be 13,916 to 17,350 PLN gross per month. In addition to the base pay, this role may be eligible for incentive pay based on company and individual performance.\nWhy Westinghouse?\nWestinghouse Electric Company is the global nuclear energy industry's first choice for safe, clean, and efficient energy solutions. We enable our delivery of this vision by living our value system:\nSafety and Quality \nIntegrity and Trust \nCustomer Focus and Innovation \nSpeed and Passion to Win \nTeamwork and Accountability \nWestinghouse offers great benefits to all our employees around the globe to keep them healthy and enhance their well-being.\nBenefits offered in Poland include:\nStable employment\nOutstanding and supportive atmosphere of collaboration in the team and in Westinghouse group\nAttractive remuneration with bonuses\nHybrid model of work, flexible working time\nMyBenefit Cafeteria\nLife insurance\nPrivate Medical Care\nPrivate Group Insurance\nEmployee Assistance Program: confidential counseling and resources for employees, eligible dependents, and household members\nCharity initiatives\nParking space for employees\nEmployee referral program\nYou can learn more about Westinghouse by visiting http://www.westinghousenuclear.com.\nWestinghouse is an Equal Opportunity Employer including Veterans and Individuals with Disabilities.\nGet connected with Westinghouse on social media: Twitter| Facebook| LinkedIn| YouTube","description_format":"text","description_chars":6376,"description_truncated":false,"requirements":{"experience_years_min":5,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":true,"languages":[]},"benefits":["Cafeteria","Equity","Flexible schedule","Life insurance"],"hiring_locations":[{"name":"Poland","iso":"PL","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Energy & Utilities","Nuclear Energy"],"lifecycle":[{"event":"open","at":"2026-09-28T03:25:00Z"}],"visa":[],"liveness":{"score":36,"band":"fade","label":"Fading","p_open":1,"p_active":0.798,"p_room":0.45,"age_days":38,"expected_fill_days":25,"reasons":["conf:1","urgency","velocity","win:tail","comp:brand"],"computed_at":"2026-10-24T06:02:35Z"},"pay":{"stated_usd_annual":54624,"is_top_pay":false},"html_url":"https://alion.io/job/westinghouse-nuclear-principal-engineer-platform-services","json_url":"https://alion.io/job/westinghouse-nuclear-principal-engineer-platform-services.json","meta":{"generated_at":"2026-10-24T21:22:04Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":31344,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-25T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":1796470},"rest":"https://alion.io/mcp/rest/get_company?id=1796470"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fwestinghouse-nuclear-principal-engineer-platform-services"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fwestinghouse-nuclear-principal-engineer-platform-services"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fwestinghouse-nuclear-principal-engineer-platform-services"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/westinghouse-nuclear-principal-engineer-platform-services\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fwestinghouse-nuclear-principal-engineer-platform-services"}]}