Remote Senior Windows Platform Engineer: Cloud Automation

Openkrill; United States; Remote; USD 120,000 - 150,000; Full time

Job summary

Tech Holding is seeking a Senior Windows Engineer for a contract role to reinforce Windows platform resilience across AD, DNS, Kerberos, automation, and cloud infrastructure. You will implement IaC, PowerShell automation, image pipelines, and security controls in a remote, USA-based environment.

Ideal candidates have expert AD/DNS, Kerberos, and cloud experience, plus strong scripting and observability skills.

Qualifications

• Expert-level experience with Active Directory and DNS resilience, replication topology and health, FSMO roles, DFS-R, NTDS, AD-integrated DNS and domain controllers.
• Expert-level knowledge of Kerberos authentication, including SPNs, duplicate-SPN failure modes, constrained delegation, AES/RC4 encryption, managed service accounts, and reverse DNS dependencies.
• Strong experience with identity integration across Windows and non-Windows environments, including LDAP and single sign-on.
• Expert-level experience with golden image and patch pipelines, including image bake automation, CI-scheduled builds, promotion, deprecation, deregistration, and CVE-driven rebuilds.
• Strong Windows observability and PowerShell experience.
• Strong experience with Infrastructure as Code and configuration management, including OpenTofu and tools such as Chef, Ansible, and Systems Manager.

Responsibilities

• Improve Active Directory and DNS resilience, including replication topology and health, FSMO roles, DFS-R, NTDS, AD-integrated DNS, and domain controllers running as cloud instances.
• Support the estate's migration from NTLM to Kerberos, ensuring both protocols can operate without an outage during the transition.
• Develop and maintain PowerShell automation supporting Windows platform operations and resiliency.
• Support Infrastructure as Code and configuration management, including Chef, Ansible, Systems Manager, guardrail policies, and OpenTofu.
• Improve Windows observability, including infrastructure agents, Windows service and event-channel collection, script-derived metrics, and domain controller health.

Skills

Active Directory

DNS resilience

Kerberos authentication

PowerShell

Infrastructure as Code

Cloud fluency

Tools

Chef

Ansible

Systems Manager

OpenTofu

Job description

Tech Holding is seeking a Senior Windows Engineer for a contract role to reinforce Windows platform resilience across AD, DNS, Kerberos, automation, and cloud infrastructure. You will implement IaC, PowerShell automation, image pipelines, and security controls in a remote, USA-based environment.

Ideal candidates have expert AD/DNS, Kerberos, and cloud experience, plus strong scripting and observability skills.