Senior Infrastructure Engineer(Enterprise Windows, Active Directory and VDI )

Overview

Senior Infrastructure Engineer responsible for engineering, governing and continuously improving the organization's Windows infrastructure, including Active Directory, DNS, DHCP, PKI, Windows Server, VMware Horizon and Azure Virtual Desktop environments.

What you'll do

• Own the enterprise Windows infrastructure, including Active Directory, DNS, DHCP, PKI, Windows Server, VMware Horizon and Azure Virtual Desktop (AVD), ensuring high availability, security and operational excellence.
• Define and maintain engineering standards, platform architecture and operational governance for Windows infrastructure services across the organization.
• Administer Active Directory in a global multi-domain environment, including domain controller health, replication, trust relationships, functional level governance and Group Policy management.
• Manage enterprise DNS, DHCP, Infoblox integration, IP address management (IPAM) and certificate lifecycle through Microsoft Certificate Services (MSCA).
• Lead Windows Server lifecycle initiatives, including build standards, CIS hardening, patch management, operating system upgrades and migration programs.
• Design and implement privileged access management controls, including JIT administration, Privileged Access Workstations (PAWs), service account governance and PAM solutions such as BeyondTrust, CyberArk or Delinea.
• Own VMware Horizon and Azure Virtual Desktop environments, including image lifecycle management, FSLogix, host pool administration, capacity planning, performance optimization and cost governance.
• Implement Azure Virtual Desktop capabilities including MSIX App Attach, Azure NetApp Files integration, Entra ID access controls and auto-scaling policies.
• Build and maintain PowerShell automation for Active Directory administration, server provisioning, patch reporting, certificate management and VDI lifecycle operations.
• Review infrastructure designs, operational procedures and CAB changes to ensure alignment with enterprise standards, security requirements and long-term platform strategy.
• Partner with Cyber Security, Cloud, Networking and Application teams to implement infrastructure hardening, vulnerability remediation and compliance initiatives.
• Coordinate complex infrastructure projects, vendor engagements and platform enhancements while ensuring successful delivery and operational readiness.
• Mentor infrastructure engineers and managed service partners by providing technical guidance, promoting engineering best practices and driving continuous improvement across infrastructure operations.
• Maintain comprehensive documentation, operational runbooks and knowledge repositories to ensure consistent support and platform sustainability.

What you'll need

• 7–10 years of enterprise Windows infrastructure experience in an MNC, GCC or large-scale enterprise environment.
• Strong expertise in Active Directory across multi-domain and multi-forest environments, including replication, trust architecture, Group Policy design and identity services.
• Hands-on experience with Windows DNS, DHCP, Infoblox, IPAM and enterprise networking fundamentals.
• Extensive experience managing Windows Server infrastructure, including provisioning, hardening, patching, operating system lifecycle management and migration programs.
• Minimum 3 years of hands-on experience with VMware Horizon and/or Azure Virtual Desktop (AVD) in production environments, including FSLogix and image lifecycle management.
• Experience administering Azure Entra ID, Azure Virtual Desktop, Azure networking and hybrid identity environments.
• Strong knowledge of Public Key Infrastructure (PKI), Microsoft Certificate Services (MSCA) and certificate lifecycle management.
• Hands-on experience with Privileged Access Management (PAM) solutions such as BeyondTrust, CyberArk or Delinea.
• Advanced PowerShell scripting skills for infrastructure automation, reporting and operational efficiency.
• Experience establishing infrastructure standards, reviewing technical solutions and collaborating with managed service providers to ensure engineering quality and operational excellence.
• Strong communication, stakeholder management and cross-functional collaboration skills with the ability to influence technical decisions across infrastructure initiatives.

Nice to have

• VMware Horizon/Omnissa certification (VCP-DM or equivalent).
• Microsoft AZ-104 or Windows Server Hybrid Administrator Associate certification.
• Experience with AWS WorkSpaces.
• Experience with Qualys or equivalent vulnerability management solutions.
• Experience managing CrowdStrike Falcon across Windows Server and VDI environments.
• Knowledge of secure remote access or browser isolation platforms.
• Experience leading enterprise infrastructure modernization, migration or platform transformation initiatives.