Microsoft Senior Engineer

Under the direction of the DICE Team Lead, you design, implement, configure, operate, maintain and troubleshoot complex Microsoft enterprise infrastructure and associated services in secure enterprise environments.

• Provide senior-level technical expertise for Microsoft Windows Server platforms and associated infrastructure services throughout their complete lifecycle, including architecture, deployment, configuration, hardening, patching, upgrade, migration, monitoring and decommissioning.
• Design, administer and troubleshoot Microsoft Active Directory environments, including domains, forests, trusts, Group Policy, authentication services, DNS integration and associated identity infrastructure.
• Provide subject matter expertise in Identity and Access Management (IAM), authentication, authorization and federation technologies, including Active Directory Federation Services (AD FS), Microsoft Entra ID and related Microsoft identity technologies, as well as open source technologies such as Keycloak.
• Design, implement, maintain and troubleshoot Public Key Infrastructure (PKI), certificates and certificate-dependent services used within Microsoft enterprise environments, including certificate lifecycle management, trust relationships and integration with applications and authentication services.
• Design, deploy, configure, operate and maintain on-premise Microsoft SharePoint SE environments and related information-management capabilities, including site architecture, permissions, metadata, taxonomies, search, content management, collaborative services and integration with enterprise applications.
• Design and maintain secure integrations between Microsoft platforms and other enterprise services and applications, including, where applicable, the Atlassian Data Center Technology Stack (Jira, Confluence), Power BI, Splunk, SQL Server and other data or collaboration platforms.
• Provide engineering support for Microsoft Azure DevOps cloud services architecture in support of maintaining the reference dev environment (NATO Software Factory) for the DICE team.
• Support cloud and DevOps practices using Microsoft Azure and Azure DevOps or equivalent enterprise DevOps technologies, including source control, automated deployment, CI/CD processes and infrastructure configuration management.
• Develop and maintain automation solutions using PowerShell and, where appropriate, other scripting or automation technologies to improve repeatability, reliability and efficiency of Microsoft infrastructure operations.
• Participate in the design and implementation of infrastructure-as-code, automated configuration and deployment approaches where applicable to Microsoft Azure and hybrid infrastructure.
• Ensure Microsoft infrastructure and services comply with applicable NATO security requirements, security hardening standards and Information Technology Service Management (ITSM) processes.
• Perform security hardening and technical security reviews of Microsoft infrastructure, operating systems, identity services and applications, and remediate identified vulnerabilities or configuration weaknesses.
• Provide advanced troubleshooting and root-cause analysis for complex incidents and problems involving Microsoft infrastructure, authentication, federation, certificates, networking, applications and dependent services.
• Support Incident, Problem, Change, Configuration and Release Management activities in accordance with applicable ITSM processes.
• Provide architecture support and technical recommendations concerning Microsoft infrastructure evolution, technology selection, lifecycle management, resilience, availability, scalability and security.