Windows Services L3 Operations and Administration Engineer L2/L3

Role & responsibilities

1 We are seeking an experienced L3 Operations and Administration Engineer specializing in Windows Services with expertise in Active Directory (AD), SCCM, IIS, Intune, and Red Hat Satellite for Linux environments. This role requires advanced troubleshooting skills, deep technical expertise, automation capabilities, and the ability to optimize Windows and Linux services for high availability and security.

The ideal candidate will be responsible for leading incident resolution, system enhancements, automation initiatives, and security compliance while mentoring junior engineers and collaborating with cross-functional teams.

Major Duties & Responsibilities:

Active Directory (AD) Administration & Support:

• Manage and optimize Active Directory forests, domains, trusts, and replication.
• Design and implement Group Policy (GPO) strategies, RBAC, and authentication policies.
• Troubleshoot complex AD issues, including Kerberos, NTLM, ADFS, and LDAP authentication.
• Support AD migrations, domain consolidations, and security hardening efforts.

SCCM (System Center Configuration Manager) Administration:

• Design, deploy, and optimize SCCM infrastructure for OS deployments, application packaging, and patch management.
• Troubleshoot software distribution, WSUS synchronization, and client health issues.
• Optimize SCCM reporting, compliance policies, and Windows Update deployments.
• Automate SCCM processes using PowerShell and Configuration Baselines.

IIS (Internet Information Services) Administration:

• Architect, configure, and optimize IIS-based applications, load balancing, and SSL/TLS security.
• Troubleshoot application crashes, performance bottlenecks, and security vulnerabilities.
• Work with developers to fine-tune web applications, configure custom error handling, and optimize application pools.
• Manage reverse proxies, URL rewrite rules, and IIS security configurations.

Microsoft Intune Administration:

• Architect and manage Intune-based MDM/MAM solutions for endpoint security and compliance.
• Troubleshoot device enrollment, policy conflicts, conditional access issues, and application deployments.
• Integrate Intune with Azure AD, Defender for Endpoint, and SCCM (Co-Management).
• Optimize Intune compliance policies, device profiles, and zero-trust security models.

Satellite Linux Administration:

• Design and support Red Hat Satellite for Linux system provisioning, patching, and repository management.
• Troubleshoot Linux system registration, errata management, and automation failures.
• Implement Ansible automation for Linux configuration management and compliance enforcement.
• Ensure secure and compliant Linux patching strategies in hybrid environments.

Incident, Problem & Change Management (L3 Support):

• Lead major incident resolution and root cause analysis (RCA) for Windows and Linux service failures.
• Handle complex escalations from L1 and L2 teams and provide deep-dive troubleshooting.
• Work on change management and risk assessments for infrastructure modifications.
• Design disaster recovery (DR) plans and high-availability (HA) configurations.

Automation & Scripting:

• Develop advanced PowerShell scripts for Active Directory, SCCM, IIS, and Intune automation.
• Use Bash, Python, and Ansible for Linux service automation and compliance monitoring.
• Implement Infrastructure as Code (IaC) for Windows and Linux environments.
• Automate monitoring, reporting, and remediation tasks to reduce manual interventions.

Security & Compliance:

• Ensure Active Directory security hardening following CIS, NIST, and ISO 27001 guidelines.
• Implement multi-factor authentication (MFA), privileged access management (PAM), and security baselines.
• Optimize endpoint security configurations in SCCM and Intune.
• Ensure compliance with security policies and vulnerability remediation for Windows and Linux systems.

Performance Monitoring & Optimization:

• Monitor and optimize Windows and Linux services using SCOM, Splunk, SolarWinds, Prometheus, or ELK.
• Perform Active Directory health analysis, SCCM performance tuning, and IIS load balancing optimizations.
• Proactively identify and resolve bottlenecks, security vulnerabilities, and performance degradation.

Documentation & Knowledge Sharing:

• Maintain detailed SOPs, runbooks, and troubleshooting documentation.
• Conduct mentorship, training, and knowledge-sharing sessions for L1 and L2 engineers.
• Contribute to internal wikis, technical playbooks, and automation repositories.

Preferred candidate profile

• Bachelors degree in Computer Science, IT, or a related field (or equivalent experience).
• 7+ years of experience in Windows Server, Active Directory, SCCM, IIS, Intune, and Linux administration.
• Deep expertise in Windows Server 2016/2019/2022, AD forests, and hybrid identity management.
• Strong knowledge of SCCM OS deployments, WSUS patching, and Intune endpoint security.
• Experience in IIS optimization, SSL/TLS hardening, and application deployment.
• Proficiency in Red Hat Satellite for Linux patching and compliance.
• Advanced PowerShell, Bash, and Ansible scripting for automation.
• Experience with hybrid cloud environments (Azure, AWS, GCP) is a plus.
• Exposure to ITIL processes for Incident, Problem, and Change Management.

• Microsoft Certified: Windows Server Hybrid Administrator Associate
• Microsoft Certified: Endpoint Administrator Associate (MD-102)
• Microsoft Certified: Azure Administrator Associate (AZ-104)
• Red Hat Certified Engineer (RHCE) or Red Hat Certified Specialist in Linux Satellite
• ITIL Foundation Certification (preferred)

Perks and benefits