Senior System Engineer

Gotham Technology Group; New York (NY); On-site; USD 150,000 - 210,000; Full time

Job summary

Gotham Technology Group is seeking a Senior Infrastructure Engineer to design, run, and modernize an enterprise environment spanning Windows Server, Azure/hybrid cloud, Microsoft 365, and IT operations.

The role values deep expertise in one or two areas while maintaining familiarity across the rest, with a proven track record of owning enterprise-grade systems end-to-end and sound judgment under pressure. You’ll work across identity, cloud, and operations to improve reliability.

Qualifications

• Proven track record owning enterprise-grade systems end‑to‑end.
• Sound judgment under pressure with the ability to work across the stack.
• Strong infrastructure engineers who can adapt across Windows, cloud, and modern workplace domains.

Responsibilities

• Own and support Windows Server environments (2016/2019/2022/2025) including builds, patching, and remediation.
• Administer AD DS, replication, DNS, DHCP, and Group Policy.
• Design, deploy, and support hybrid Azure/on‑prem infrastructure; automate with IaC.
• Support Microsoft 365 services, Entra ID, MFA, and policy enforcement.
• Monitor performance, troubleshoot incidents, and participate in on‑call rotation.

Skills

Windows Server

Active Directory

Identity & access mgmt

Automation

Cloud

VMware

Tools

PowerShell

Python

Terraform

Bash

Microsoft Graph

Azure

Job description

Our client is hiring a Senior Infrastructure Engineer to help design, run, and modernize an enterprise technology environment that spans on-premises Windows infrastructure, Azure/hybrid cloud, Microsoft 365, and day-to-day IT operations. This role is intentionally broad: we're looking for strong infrastructure engineers first, and are open to candidates whose deepest expertise sits in any one of several adjacent specialties — traditional Windows/Active Directory environments, cloud and automation engineering, Microsoft 365 and the modern workplace, or infrastructure operations and support. What matters most is a proven track record owning enterprise-grade systems end to end, sound judgment under pressure, and the ability to work across the stack even outside your primary specialty.

You do not need to be an expert in every area listed below. Strong candidates typically bring deep, hands-on strength in one or two of these domains, plus working familiarity across the rest.

What You'll Do

Windows & Identity Infrastructure

• Own and support enterprise Windows Server environments (2016/2019/2022/2025), including builds, lifecycle management, patching, and vulnerability remediation.
• Administer Active Directory Domain Services, AD replication, Sites & Services, Kerberos/Windows authentication, DNS, DHCP, and Group Policy.
• Manage NTFS/share permissions, ACLs, and certificate infrastructure/PKI.
• Support identity and access management, including Active Directory, Microsoft Entra ID, MFA, SSO, and privileged access controls.

Cloud, Hybrid & Automation

• Design, deploy, and support hybrid infrastructure across Azure (and/or AWS) and on-premises environments.
• Build and maintain automation and infrastructure-as-code to improve reliability, consistency, and operational efficiency (PowerShell, Python, Bash, Terraform, or similar).
• Support cloud security, identity, and governance, and contribute to hybrid architecture decisions.
• Maintain enough VMware/virtualization depth to troubleshoot across the full infrastructure stack.

Microsoft 365 & Modern Workplace

• Support and help evolve core Microsoft 365 collaboration services (SharePoint Online, Exchange Online, OneDrive), including configuration governance and escalation-level troubleshooting.
• Work with Microsoft Entra ID and Microsoft Purview, including Conditional Access and compliance policies, in partnership with InfoSec, Legal, and Compliance.
• Build automation with PowerShell and Microsoft Graph to drive policy deployment, configuration consistency, and reduced manual effort for end-user support teams.
• Contribute to enterprise mobility (MDM) and emerging capabilities such as AI/Copilot enablement.

Operations, Monitoring & Support

• Proactively monitor system performance, availability, and capacity using enterprise monitoring tools; identify and resolve issues before they impact the business.
• Respond to and troubleshoot infrastructure incidents across server, network, storage, and application layers, and participate in on-call/after-hours rotation as needed.
• Support backup, disaster recovery, and business continuity processes, including testing and validation.
• Maintain documentation for systems, processes, configurations, and incident response procedures, and follow ITSM/ITIL-aligned practices.
• Serve as an escalation point and mentor for service desk and operations teams on complex technical issues.