Senior Windows System Engineer

London Approach; East Windsor Township (NJ); On-site; USD 90,000 - 150,000; Full time

Job summary

London Approach is seeking a Senior Windows Platform Engineer to architect, automate, and modernize a complex enterprise infrastructure. The role emphasizes production engineering, IaC, and automation across Windows Server, AD, Azure, and VMware.

The ideal candidate will own infrastructure initiatives, deliver scalable standards, and mentor other engineers while collaborating with security, cloud, and networking teams located at our corporate HQ in New Jersey.

Qualifications

• Extensive experience engineering enterprise Windows infrastructure in production environments.
• Strong Windows Server, AD, DNS, and lifecycle management expertise.
• Hands-on with Entra ID, hybrid identity, and IaC practices.
• Proven PowerShell scripting and automation capability.

Responsibilities

• Architect, engineer, and maintain enterprise Windows infrastructure for production environments.
• Establish scalable platform standards across Windows Server, AD, Azure, VMware, and storage.
• Design highly available, secure, and recoverable infrastructure solutions.
• Lead projects from requirements through implementation and handoff.
• Develop PowerShell automations for provisioning, patching, and reporting.
• Improve observability, monitoring, and production reliability.

Skills

PowerShell automation

Enterprise Windows

Active Directory

Azure

VMware

Networking basics

Security & IAM

DevOps mindset

Tools

VMware ESXi

vCenter

Azure

Microsoft Entra ID

Intune

Endpoint Configuration Manager

Job description

Location: Corporate Headquarters - East Windsor, NJ

Employment Type: Full-Time, Permanent

Position Overview

We are seeking a highly experienced Senior Windows Platform Engineer to help architect, engineer, automate, and modernize a complex enterprise infrastructure environment.

This is not a traditional Windows Systems Administrator position focused primarily on monitoring systems, resolving routine tickets, creating user accounts, or performing repetitive maintenance. We are looking for a true infrastructure engineer who can take ownership of production platforms, establish technical standards, design scalable solutions, automate operational processes, and lead infrastructure initiatives from architecture through implementation.

The ideal candidate will have command across the major domains of enterprise infrastructure, including Windows Server, Active Directory, VMware virtualization, SAN storage, backup and recovery, Azure cloud services, endpoint management, automation, and platform security.

This role leans heavily toward a DevOps-minded, production engineering approach, with an emphasis on Infrastructure as Code, automation, reliability, standardization, lifecycle management, and continuous improvement.

What You Will Do

• Architect, engineer, and maintain enterprise Windows infrastructure supporting business-critical production environments.
• Establish scalable platform standards across Windows Server, Active Directory, Microsoft Entra ID, Azure, VMware, storage, backup, and endpoint management technologies.
• Design highly available, secure, resilient, and supportable infrastructure solutions.
• Lead infrastructure projects from initial requirements and architecture through engineering, implementation, documentation, and production handoff.
• Develop PowerShell automation for provisioning, configuration, patching, reporting, compliance, remediation, and operational workflows.
• Reduce manual administrative work by introducing repeatable automation, standardized configurations, and engineering best practices.
• Engineer and optimize VMware environments, including ESXi, vCenter, clusters, virtual networking, storage integration, capacity planning, and lifecycle management.
• Support the architecture and integration of enterprise SAN storage platforms.
• Design and improve backup, recovery, disaster recovery, and business continuity capabilities.
• Engineer and modernize Active Directory, Group Policy, Microsoft Entra ID, identity services, authentication, and access management.
• Support the transition from traditional Group Policy and device-management practices toward modern management through Microsoft Intune and Microsoft Endpoint Configuration Manager.
• Design and support hybrid infrastructure solutions spanning on-premises environments and Microsoft Azure.
• Partner with cloud, security, networking, application, database, and operations teams to deliver reliable production platforms.
• Improve platform observability, monitoring, performance, security, recoverability, and operational readiness.
• Serve as a senior technical escalation point for complex infrastructure and production issues.
• Evaluate existing platforms, identify technical debt, and recommend modernization strategies.
• Create architecture diagrams, technical standards, engineering documentation, implementation plans, and operational runbooks.
• Mentor other engineers and provide technical direction across infrastructure initiatives.

Required Experience

• Extensive experience engineering enterprise Windows infrastructure in complex, production-based environments.
• Advanced knowledge of Windows Server architecture, engineering, security, troubleshooting, patching, and lifecycle management.
• Strong Active Directory expertise, including domain architecture, Group Policy, DNS, authentication, replication, trusts, and identity integration.
• Hands-on experience with Microsoft Entra ID and hybrid identity environments.
• Advanced PowerShell scripting and infrastructure automation experience.
• Strong VMware virtualization experience, including ESXi and vCenter.
• Experience engineering or supporting enterprise SAN storage environments.
• Strong knowledge of enterprise backup, recovery, disaster recovery, and data-protection technologies.
• Experience with Microsoft Azure infrastructure services and hybrid cloud architecture.
• Experience with Microsoft Intune and Microsoft Endpoint Configuration Manager.
• Strong understanding of infrastructure security, high availability, capacity planning, performance, monitoring, and production reliability.
• Experience leading technical projects from design through implementation.
• Ability to troubleshoot complex issues across multiple infrastructure domains.
• Strong communication skills and the ability to explain technical recommendations to both engineering teams and business leadership.

Ideal Background

The strongest candidates will have experience working as a senior infrastructure engineer, platform engineer, systems engineer, or infrastructure architect within a large, highly available production environment.

We are especially interested in engineers who approach infrastructure as a platform-using automation, reusable standards, source control, documentation, and repeatable deployment processes rather than relying on manual administration.

Experience with technologies or practices such as Terraform, Bicep, Azure DevOps, Git, CI/CD pipelines, Infrastructure as Code, configuration management, observability, or Site Reliability Engineering is highly desirable.

What This Role Is Not

This is not a position centered on basic systems administration, routine user support, passive monitoring, or ticket-based maintenance.

The person hired will be expected to:

• Architect solutions rather than simply maintain existing configurations.
• Engineer and automate platforms rather than rely on repetitive manual processes.
• Improve production reliability rather than only respond to outages.
• Establish standards rather than work entirely from existing procedures.
• Take end-to-end ownership of infrastructure initiatives.

Compensation and Schedule

This is a full-time, permanent position offering a starting salary of up to $150,000, depending on experience.