Windows SME

Nordea; Warszawa; Hybride; PLN 180 000 - 360 000; Plein temps

Résumé du poste

Nordea Poland is seeking a Windows SME to join the Core Infrastructure team in Warsaw. You will design, secure, and automate the lifecycle of enterprise Windows server and endpoint infrastructure.

The role emphasizes scale, security baselines, and automation, with collaboration across security, IT operations and cloud platforms in a large financial services environment. You will build and maintain Windows gold images, manage MECM/SCCM deployments, and drive infrastructure as code initiatives

Qualifications

• Experience designing, deploying and maintaining large-scale Windows Server environments.
• Experience with Windows security baselines and translating requirements into GPOs across domains.
• Proven ability to automate server provisioning and patching at scale.

Responsabilités

• Design, deploy, and maintain large-scale Windows Server environments.
• Build, test, and lifecycle-manage Windows Gold Images for on-prem and cloud infrastructure.
• Implement and maintain Windows security baselines via GPOs across domains.
• Administer MECM/SCCM for centralized deployment, compliance reporting, and task sequences.
• Write PowerShell scripts and IaC tooling to automate provisioning, patching and operations.
• Lead enterprise transformation projects including OS upgrades, data center migrations, and hybrid-cloud integrations.

Connaissances

PowerShell scripting

Infrastructure automation

OS hardening

Security baselines

Active Directory

MECM/SCCM

VMware/Hyper‑V

OpenShift

Cloud integration (GCP/AWS/Azure)

Incident escalation

Outils

MECM/SCCM

GPOs

WSUS

Git/Azure DevOps/Bitbucket/GitHub Actions

Terraform/Ansible

PowerShell DSC

Description du poste

Select how often (in days) to receive an alert: Create Alert

Welcome to Group Technology, where we pride ourselves on engineering solutions and direct Nordea’s transformation by providing a holistic technological view and structured understanding of the bank, and its surrounding environment to enable the Customer Vision and the Business Strategy.

We are seeking a Windows SME a technical authority on an enterprise engineering team, to help in designing, securing, and automating the complete lifecycle of the organization's server and endpoint infrastructure. On that position SME focuses on engineering scale, standards, design patterns, and systemic automation together with eyes on deep OS diagnostics and vendor cooperation on so the platform can run reliably with minimal manual intervention.

Nordea is a place where traditions meet tomorrow. We're not just a bank, we'rea tech employer on a mission to evolve finance securely and responsibly. Together, we impact millions of people’s daily lives by ensuring they can access our solutions anytime, anywhere, while safeguarding their personal data and wealth. Join us in making an impact on the banking industry.

About our team

Meet the Core Infrastructure. We are the backbone of Nordea global technology ecosystem. Our Core Engineering team is a high-impact group of engineers dedicated to designing, automating, and maintaining the enterprise-scale Windows and Unix infrastructure that powers our entire organization.

We don't just maintain servers; we treat infrastructure as code. Our mission is to build highly secure, resilient, and self-healing platforms across thousands of physical, virtual, and cloud environments. We are a collaborative, forward-thinking team that bridges the gap between traditional infrastructure and modern cloud architecture.

What you'll be doing

• Design, deploy, and maintain large-scale Windows Server environments.
• Build, test, and lifecycle-manage Windows Gold Images for servers on premises and in the cloud infrastructure.
• Implement and maintain Windows security baselines by translating security requirements into Group Policy Objects (GPOs) across multiple domains.
• Administer centralized deployment platform Microsoft Endpoint Configuration Manager (MECM/SCCM).
• Oversee large-scale software distribution, compliance reporting, task sequences, and configuration baselines

Automation & Scripting:

• Write advanced PowerShell scripts, Desired State Configuration (DSC), or Ansible playbooks to automate server provisioning, patching, and repetitive operational tasks.
• Build reusable automation frameworks to eliminate manual toil and ensure environment consistency.

Security, Patching & Compliance:

• Monitor Microsoft security advisories and vulnerability findings across massive server/endpoint estates.
• Engineer, package, test, and roll out security hardening standards, OS patches, and risk-based vulnerability remediations mapped to strict SLAs
• Serve as the final technical escalation and consultation point for the internal Operations team on complex Windows Server, performance, clustering, and infrastructure issues.
• Lead or consult on enterprise transformation projects, such as OS upgrades, data center migrations, hybrid-cloud integration (GCP/Azure/AWS), and audit/compliance readiness.

Who you are

Desirable skills and tools:

• Advanced PowerShell scripting and large-scale infrastructure automation.
• Experience with Ansible, Terraform, or PowerShell DSC for Infrastructure as Code and configuration management.
• Familiarity with Git, Azure DevOps, Bitbucket, or GitHub Actions for CI/CD and automated deployments.
• Strong knowledge of Enterprise Active Directory, including multi-domain/forest environments, GPOs, trusts, and replication.
• Experience managing large-scale server patching and configuration with MECM/SCCM, WSUS, or similar tools.
• Expertise in Windows Server Failover Clustering (WSFC), SAN storage, and disaster recovery solutions.
• Advanced administration of VMware, Hyper‑V, or OpenShift environments.
• Experience with hybrid cloud and identity solutions, including Azure (Entra ID), AWS, or Google Cloud integrations.
• Knowledge of OS hardening and security standards, such as CIS Benchmarks or STIG.
• Hands‑on experience with enterprise monitoring and observability tools such as Splunk, SCOM, Datadog, or Azure Monitor.
• Strong troubleshooting skills, including analysis of memory dumps, event logs, and network traces, and collaboration with vendor support for critical incident resolution.
• Experience managing large-scale enterprise environments with 1,000+ endpoints.
• Leading server, platform, or virtualization migration programs in complex infrastructures.
• Implementing and auditing security and hardening standards, including CIS, STIG, or Zero Trust frameworks.
• Driving Infrastructure as Code adoption by transforming manual processes into automated solutions.
• Acting as a senior escalation point for critical incident management and major outage resolution.
• Managing high-priority vendor escalations, including collaboration with Microsoft engineering teams on complex technical issues.

It would be ideal if you also are:

• Proficient in English, spoken and written C1.
• Experienced working for a financial institution.

What we offer

Collaboration. Ownership. Passion. Courage. These are the values that guide us in how we work and how we make decisions – and that we imagine you share with us.

People are driven by many different factors. For some, it’s to take their career to the next level. For others, it’s to break new ground within their area of expertise – in other words, with us, you will always move forward.

A culture that fosters performance and growth in one of the largest Nordic banks, offering various opportunities to evolve, develop and learn from brilliant colleagues with diverse backgrounds in a vibrant working environment.

Hybrid working model – we believe in the value of bringing people together and at the same time we embrace the freedom of flexibility.

Diversity and inclusion are a natural part of our daily work. We know that an inclusive workplace is a sustainable one. We genuinely believe that our diverse backgrounds, experiences, characteristics and traits make us stronger together. Every day we strive to find new ways to improve diversity and inclusion within our community e.g. we have signed the European Diversity Charters in the countries where we operate to show our commitment and engage with others to continue learning and improving.

Next steps

Submit your application no later than 11/11/2026.For more information, you’re welcome to contact Juliusz Sosnowski at [e-mail].

The recruitment process consists of the following steps:

• Preliminary CV selection
• Online interview with the hiring leader
• Background check

We enable dreams and aspirations for a greater good.

We build relationships. We add a personal touch to everything we do – when advising our customers, collaborating with colleagues, and meeting our potential candidates.

We learn and develop. We take pride in being experts and thinking ahead. We use our expertise to meet our customers’ needs, from the simplest to the most complex. We bring a growth mindset to our work that enables us to focus on a broader perspective in our daily challenges.

We lead change. We are responsible and aware of the impact of our decisions, both for our customers and for our local and global communities. Mindful of our responsibility towards current and future generations, we have made sustainability an integrated part of our business strategy.

We are Nordea. We have a 200-year history of supporting and growing the Nordic economies and our values are deeply rooted in these open, progressive and collaborative societies. As one of the biggest employers in the Nordics, Poland and Estonia, you have excellent opportunities to evolve, develop and move forward with us.

Studies show that members of underrepresented communities don’t apply for jobs unless they tick all the qualification boxes. If this is part of why you hesitate to apply, we would like you to reconsider and give it a chance. Maybe your profile fits our needs much better than you think.

Please include permit for processing personal data in CV as following:

In accordance with art. 6 (1) a and b. Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) hereinafter ‘GDPR’. I agree to have: my personal data, education and employment history proceeded for the purposes of current and future recruitment processes in Nordea Bank Abp.

The administrator of your personal data is: Nordea Bank Abp operating in Poland through its Branch, address: Aleja Edwarda Rydza Śmiglego 20, 93-281 Łodź. Your personal data will be processed for the recruitment processes in Nordea Bank Abp. You have a right to access your personal data, right to rectify and right to delete. Disclosing the personal data in the scope specified by the provisions of Polish Labour Code from 26 June 1974 and executive acts are mandatory. Providing personal data is necessary to conduct the recruitment processes. The request for the deletion of your personal data means resignation from further participation in recruitment processes and causes the immediate removal of your application. Detailed information concerning processing of your personal data can be found at: https://www.nordea.com/en/doc/nordea-privacy-policy-for-applicants.pdf

We reserve the right to reply only to selected applications.