New York, NY, 4 days onsite a must
This is a high-visibility infrastructure role at a firm where technology directly drives the business. You'll have real ownership over a platform that matters, involved in cross-platform strategy, and the chance to modernize and mentor rather than just maintain.
Our client, an investment firm, is looking for a Senior Platform Engineer to own the server-side Windows platform within their core Infrastructure organization. This is not a desktop or end-user support role, it's deep, hands-on engineering of the Windows Server, identity infrastructure, and the automation that keeps it reliable, secure, and fast across data centers and cloud regions.
Their engineering group build systems at serious scale.
Responsible for
- Engineer, automate, and operate the Windows Server environment across private data centers and cloud regions; reliability, performance, and security
- Own Active Directory and hybrid identity (Entra ID) end-to-end: domain/forest architecture, Group Policy, trusts, and the integrations connecting Windows identity to the rest of the environment
- Build deployment, configuration, patching, and monitoring automation using PowerShell and modern configuration management
- Define and enforce Windows security baselines and hardening standards, partnering closely with the security team on patching cadence, privileged access, and credential strategy
- Tune Windows Server for latency-sensitive, high-throughput workloads, working from the hardware and kernel level up
- Partner with the Linux platform lead to shape one coherent OS strategy across both environments
- Collaborate with infrastructure and developer‑tooling teams so the Windows platform integrates cleanly with provisioning, CI, and the broader stack
- Participate in production support and an on-call rotation, continuously improving reliability and observability
- Mentor other engineers on Windows internals, identity, and automation helping raise the overall bar for how the platform is built and run
Requirements
- 5+ years in systems or platform engineering with a strong focus on Windows Server infrastructure and over 10 years professional experience
- Advanced, hands-on experience with Windows Server internals, performance tuning, and operating at scale
- Deep experience with Active Directory and hybrid identity (Entra ID); domain/forest design, Group Policy, trust relationships
- Strong PowerShell automation experience across deployment, configuration, patching, and monitoring, plus familiarity with modern configuration management (Ansible, or similar)
- Experience defining and applying Windows security baselines/hardening standards (CIS Benchmarks, STIGs, or equivalent)
- Exposure to distributed systems and cloud platforms
- Strong communication skills, high intellectual curiosity, and comfort operating in a fast-paced, high-stakes environment
- Bachelor's degree in a technical field or equivalent practical experience