Senior Windows Platform Engineer: AD Resilience & IaC

Techholding; Los Angeles (CA); Hybrid; USD 120,000 - 160,000; Full time

Job summary

Tech Holding is seeking a Senior Windows Engineer for a project-based assignment to strengthen the stability of a critical Windows environment. You will work across AD, DNS, authentication, automation, observability, security, and disaster recovery, using PowerShell and IaC to implement resilient, cloud-enabled platforms.

The role blends deep AD/Kerberos expertise with Windows automation, cloud infra, and open tooling.

Qualifications

• Expert-level AD and DNS resilience including replication topology and health.
• Expert Kerberos authentication knowledge with SPNs, delegation, AES/RC4.
• Identity integration across Windows and non-Windows with LDAP and SSO.
• Golden image and patch pipelines, CI builds, CVE-driven updates.
• Strong Windows observability and PowerShell automation experience.
• IaC and configuration management with OpenTofu, Chef, Ansible, Systems Manager.
• Cloud infrastructure understanding, security, and data-protection controls.
• PKI and certificate services expertise, and disaster recovery design.
• Able to operate as platform/automation engineer in code-managed Windows env.

Responsibilities

• Improve AD and DNS resilience, replication health, and domain controllers in cloud.
• Migrate NTLM to Kerberos with outage-free transition planning.
• Manage SPNs, constrained delegation, and reverse DNS; audit and fix issues.
• Support identity integration including LDAP and cloud SSO across estate.
• Enhance image and patch pipelines, CI builds, and CVE-driven rebuilds.
• Improve Windows observability with agents, service health, and logs.
• Develop PowerShell automation for platform operations and resiliency.
• Support IaC and config management with OpenTofu, Chef, Ansible, Systems Manager.
• Strengthen security controls, encryption, key management, and hardening.
• Disaster recovery design with RTO/RPO, failover testing, and cloud accounts.

Skills

Active Directory

DNS resilience

Kerberos authentication

Identity integration LDAP

PowerShell automation

Infrastructure as Code

Cloud infrastructure

OpenTofu

Chef

Ansible

RBAC concepts

Disaster recovery planning

Tools

PowerShell

OpenTofu

Chef

Ansible

Systems Manager

Job description

Tech Holding is seeking a Senior Windows Engineer for a project-based assignment to strengthen the stability of a critical Windows environment. You will work across AD, DNS, authentication, automation, observability, security, and disaster recovery, using PowerShell and IaC to implement resilient, cloud-enabled platforms.

The role blends deep AD/Kerberos expertise with Windows automation, cloud infra, and open tooling.