Windows SME

Nordea; Województwo mazowieckie; On-site; PLN 180,000 - 280,000; Full time

Job summary

Nordea is seeking a Windows SME to serve as a technical authority on an enterprise engineering team. You will design, secure, and automate the lifecycle of Windows Server and endpoint infrastructure across on-premises and cloud environments.

The role emphasizes scalability, standardization, and automation to reduce manual toil. You will lead architecture and deployment of Windows platforms, manage MECM/SCCM and security baselines, and collaborate with cross-functional teams to support Nordea’s

Qualifications

• Experience designing and maintaining large-scale Windows Server environments.
• Implementation of security baselines and GPOs across multi-domain forests.
• Automation of provisioning, patching, and configurations using scripting and IaC.
• Strong incident management and root-cause analysis capabilities.
• Experience with enterprise monitoring and log analytics tools.

Responsibilities

• Design, deploy, and maintain large-scale Windows Server environments.
• Build and lifecycle-manage Windows Gold Images for on-premises and cloud.
• Implement Windows security baselines via GPOs across domains.

Skills

PowerShell

MECM/SCCM

Windows Server

Active Directory & GPO

VMware/Hyper-V

Hybrid Cloud (Azure/AWS)

Security Hardening CIS/STIG

Automation / IaC

Incident Response

Tools

MECM/SCCM

WSUS

Git

Azure DevOps

Terraform

PowerShell DSC

Job description

Job ID: 6866

Windows SME (permanent position)

Welcome to Group Technology, where we pride ourselves on engineering solutions and direct Nordea's transformation by providing a holistic technological view and structured understanding of the bank, and its surrounding environment to enable the Customer Vision and the Business Strategy.

We are seeking a Windows SME a technical authority on an enterprise engineering team, to help in designing, securing, and automating the complete lifecycle of the organization's server and endpoint infrastructure. On that position SME focuses on engineering scale, standards, design patterns, and systemic automation together with eyes on deep OS diagnostics and vendor cooperation on so the platform can run reliably with minimal manual intervention.

About Our Team

Meet the Core Infrastructure. We are the backbone of Nordea global technology ecosystem. Our Core Engineering team is a high-impact group of engineers dedicated to designing, automating, and maintaining the enterprise-scale Windows and Unix infrastructure that powers our entire organization.

We don't just maintain servers; we treat infrastructure as code. Our mission is to build highly secure, resilient, and self-healing platforms across thousands of physical, virtual, and cloud environments. We are a collaborative, forward-thinking team that bridges the gap between traditional infrastructure and modern cloud architecture.

What You'll Be Doing

Windows Platform Administration & Architecture:

• Design, deploy, and maintain large-scale Windows Server environments.
• Build, test, and lifecycle-manage Windows Gold Images for servers on premises and in the cloud infrastructure.
• Implement and maintain Windows security baselines by translating security requirements into Group Policy Objects (GPOs) across multiple domains.

Endpoint & Configuration Management:

• Administer centralized deployment platform Microsoft Endpoint Configuration Manager (MECM/SCCM).
• Oversee large-scale software distribution, compliance reporting, task sequences, and configuration baselines

Automation & Scripting:

• Write advanced PowerShell scripts, Desired State Configuration (DSC), or Ansible playbooks to automate server provisioning, patching, and repetitive operational tasks.
• Build reusable automation frameworks to eliminate manual toil and ensure environment consistency.

Security, Patching & Compliance:

• Monitor Microsoft security advisories and vulnerability findings across massive server/endpoint estates.
• Engineer, package, test, and roll out security hardening standards, OS patches, and risk-based vulnerability remediations mapped to strict SLAs

Escalation Troubleshooting & Project Delivery:

• Serve as the final technical escalation and consultation point for the internal Operations team on complex Windows Server, performance, clustering, and infrastructure issues.
• Lead or consult on enterprise transformation projects, such as OS upgrades, data center migrations, hybrid-cloud integration (GCP/Azure/AWS), and audit/compliance readiness.

Who You Are

Desirable skills and tools:

• Advanced PowerShell scripting and large-scale infrastructure automation.
• Experience with Ansible, Terraform, or PowerShell DSC for Infrastructure as Code and configuration management.
• Familiarity with Git, Azure DevOps, Bitbucket, or GitHub Actions for CI/CD and automated deployments.
• Strong knowledge of Enterprise Active Directory, including multi-domain/forest environments, GPOs, trusts, and replication.
• Experience managing large-scale server patching and configuration with MECM/SCCM, WSUS, or similar tools.
• Expertise in Windows Server Failover Clustering (WSFC), SAN storage, and disaster recovery solutions.
• Advanced administration of VMware, Hyper-V, or OpenShift environments.
• Experience with hybrid cloud and identity solutions, including Azure (Entra ID), AWS, or Google Cloud integrations.
• Knowledge of OS hardening and security standards, such as CIS Benchmarks or STIG.
• Hands-on experience with enterprise monitoring and observability tools such as Splunk, SCOM, Datadog, or Azure Monitor.
• Strong troubleshooting skills, including analysis of memory dumps, event logs, and network traces, and collaboration with vendor support for critical incident resolution.

Desirable experience:

• Experience managing large-scale enterprise environments with 1,000+ endpoints.
• Leading server, platform, or virtualization migration programs in complex infrastructures.
• Implementing and auditing security and hardening standards, including CIS, STIG, or Zero Trust frameworks.
• Driving Infrastructure as Code adoption by transforming manual processes into automated solutions.
• Acting as a senior escalation point for critical incident management and major outage resolution.
• Managing high-priority vendor escalations, including collaboration with Microsoft engineering teams on complex technical issues.

It would be ideal