Expert Systems Engineer - Windows

Ensono; Pune District; On-site; INR 400,000 - 800,000; Full time

Job summary

Ensono is seeking an Expert Systems Engineer – Windows Infrastructure to lead senior-level administration and optimization of Windows Server environments across on-prem and Azure.

The role requires deep AD, VMware, and security hardening expertise, with a focus on automated operations, incident leadership, and collaboration with stakeholders to ensure infrastructure reliability and strategic transformation.

Qualifications

• 15+ years of hands-on experience managing enterprise Windows Infrastructure environments.
• 10+ years of hands-on experience with Active Directory Domain Services (AD DS), VMware, PowerShell automation, monitoring, backup/recovery, and ITSM processes.
• 3–5 years of Microsoft Azure, Entra ID / Hybrid Identity experience.
• Strong knowledge of Windows Server versions and AD components.
• Security hardening, CIS controls, and vulnerability remediations.

Responsibilities

• Provide L4-level support for Windows Server, AD, Cloud infra, and VMware.
• Administer, maintain, troubleshoot, and lifecycle manage Windows Server environments.
• Lead root cause analysis (RCA) and service improvement initiatives.
• Drive automation using PowerShell, DSC, and Ansible; Azure management.
• Support hybrid on-premises datacentres and Azure cloud services.
• Mentor L3 engineers and contribute to runbooks and standards.

Skills

Windows Server

Active Directory

Azure

PowerShell

VMware

Monitoring

ITSM

Security hardening

Backup & Recovery

Documentation

Education

Bachelor's degree in CS/IT/Engineering

Tools

Grafana

SolarWinds

LogicMonitor

Dynatrace

Veeam

Commvault

NetBackup

Job description

Expert Systems Engineer – Windows Infrastructure

Job Description

Responsibilities

• Serve as the primary Windows Infrastructure SME supporting Windows Server, Active Directory, Cloud infra and VMware technologies, providing L4-level support and guidance.
• Own the administration, maintenance, troubleshooting, and lifecycle management of Windows Server 2012/2016/2019/2022/2025 environments.
• Manage and support Active Directory, Group Policy, DNS, DHCP, DFS, IIS, Certificate Services, Failover Clustering, and File & Print Services.
• Lead complex troubleshooting efforts and act as the highest technical escalation point for critical production incidents, major outages, and customer escalations.
• Collaborate with customers, architects, project teams, and service delivery leadership to drive infrastructure stability, transformation, and customer satisfaction.
• Participate in service transitions, customer onboarding, knowledge transfer activities, and infrastructure assessments.
• Lead root cause analysis (RCA), problem management, and service improvement initiatives to reduce recurring incidents.
• Perform server provisioning, patching, upgrades, migrations, decommissioning, and operating system modernization initiatives.
• Working knowledge of VMware vSphere, vCenter, ESXi, HA, DRS, vMotion, and related virtualization technologies as a primary infrastructure platform.
• Support hybrid infrastructure environments spanning on-premises datacentres and Microsoft Azure, including Azure VM administration, monitoring, backup, recovery, and identity-related services.
• Drive automation and operational efficiency using PowerShell, PowerShell DSC with Azure management, Ansible and other automation technologies is an added plus.
• Proven experience acting as the final technical escalation point for Windows, Active Directory, Entra ID, VMware, and Azure-related critical incidents.
• Administer enterprise monitoring and observability platforms including ServiceNow, Grafana, LogicMonitor, SolarWinds, SCOM, Dynatrace, and similar tools.
• Ensure infrastructure compliance with security standards through vulnerability remediation, Windows hardening, patch management, and audit support.
• Support backup, recovery, disaster recovery, and business continuity solutions using Veeam, Commvault, NetBackup, or equivalent technologies.
• Create and maintain technical documentation, operational runbooks, standards, and support procedures.
• Mentor L3 engineers and provide technical guidance across the Windows practices.

Qualifications

• Bachelor’s degree in computer science, Information Technology, Engineering, or equivalent experience.
• Minimum 15+ years of hands-on experience managing enterprise Windows Infrastructure environments.
• 10+ years of strong hands-on experience with Active Directory Domain Services (AD DS), including administration, troubleshooting, Group Policy management, replication, DNS integration and security best practices, VMware, PowerShell automation, enterprise monitoring, backup/recovery, and ITSM processes.
• Minimum 3 to 5 years of Microsoft Azure, Entra ID / Hybrid Identity experience.
• Technical knowledge of:
• Windows Server 2012/2016/2019/2022/2025
• Active Directory Domain Services
• Federation Services (ADFS) and Single Sign-On (SSO)
• Active Directory Sites and Services, Trusts and Replication
• Active Directory Certificate Services
• Group Policy Administration
• DNS, DHCP, DFS, DFS-R
• Microsoft Entra ID (Azure AD),
• Azure AD Connect / Microsoft Entra Connect
• Hybrid Identity, and Identity & Access Management
• Multi-Factor Authentication (MFA)
• Privileged Identity Management (PIM)
• IIS and Certificate Services
• Windows Failover Clustering
• File & Print Services
• Strong experience with VMware technologies including ESXi, vCenter, vSphere, HA, DRS, vMotion, and virtualization best practices.
• Working knowledge of Microsoft Azure services including Azure VMs, Azure Backup, Azure Site Recovery, Azure Monitor, Azure Arc, and Hybrid Identity solutions with the ability to perform day-to-day administration and troubleshooting activities.
• Advanced PowerShell scripting expertise with demonstrated experience in automation, orchestration, and operational efficiency initiatives.
• Hands‑on experience with monitoring tools such as Grafana, SolarWinds, LogicMonitor, Dynatrace, BMC Truesight, AppDynamics, and Microsoft SCOM.
• Strong understanding of ITSM processes including Incident, Problem, Change, Major Incident, and Escalation Management using ServiceNow.
• Experience managing enterprise backup and disaster recovery solutions such as Veeam, Commvault, or NetBackup.
• Strong knowledge of security, vulnerability remediation, CIS hardening standards, Microsoft Defender, Qualys, Tenable, and compliance frameworks.
• Proven experience leading P1/P2 incidents, executive escalations, customer governance meetings, and technical reviews.
• Experience with infrastructure transitions, service onboarding, due diligence, and operational readiness assessments.
• Strong communication, stakeholder management, customer-facing, documentation, and leadership skills.