Role - Senior Infrastructure Engineer

Experience - IT Development 8+ Years

Duration - 6+ Months Contract

Location - Pune

Job Purpose:

We are seeking an experienced Senior Windows Server Engineer to design, deploy, secure, and maintain our Microsoft Windows Server estate. The successful candidate will act as a senior technical authority across Windows platform services, driving stability, security hardening, and continuous improvement across the environment. Working knowledge of, or prior exposure to, VMware virtualisation is expected; deep hands-on VMware ownership is not required, and the candidate will be supported and trained to build this skillset over time.

This is a hands-on engineering role with significant scope to shape infrastructure standards, lead remediation activity, and mentor junior team members.

Key Responsibilities:

Microsoft Windows Server / Wintel

- Build, configure, and manage Windows Server (2016/2019/2022/2025) across physical and virtual platforms.
- Administer Active Directory: domain services, forests/domains, sites, trusts, replication, FSMO roles, and schema.
- Manage authentication and identity services including Kerberos, LDAP/LDAPS, NTLM hardening,

and certificate-based authentication.
- Administer core network services: DNS, DHCP, and IIS (including bindings, application pools, and keka site hardening).
- Design, deploy, and maintain Group Policy Objects (GPOs) for configuration, security baselines,

and compliance.
- Manage file/print services, DFS, failover clustering, and Windows-based application infrastructure.
- PKI / Active Directory Certificate Services (AD CS) administration and certificate lifecycle management.

Modern Workspace / Cloud Identity
- Administer Microsoft Entra ID (Azure AD), including hybrid identity, Entra Connect sync, and single sign-on (SSO).
- Design, implement, and maintain Conditional Access policies for secure, risk-based access control.
- Manage Microsoft Intune for device management (MDM/MAM), enrolment, compliance, and configuration profiles.
- Deliver and support the Modern Workspace estate: application deployment, security baselines,

and endpoint hardening.
- Implement Multi-Factor Authentication (MFA), password less, and identity protection controls.

Up-to-date Workspace / Cloud Identity
- Administer Microsoft Entra ID (Azure AD), including hybrid identity, Entra Connect sync, and single sign-on (SSO).
- Design, implement, and maintain Conditional Access policies for secure, risk-based access control.




- Manage Microsoft Intune for device management (MDM/MAM), enrolment, compliance, and configuration profiles.
- Deliver and support the Modern Workspace estate: application deployment, security baselines,

and endpoint hardening.
- Implement Multi-Factor Authentication (MFA), passwordless, and identity protection controls.

Security, Patching & Vulnerability Management
- Own and deliver patching cycles for VMware and Windows estates (e.g. WSUS / SCCM / MECM /

Intune / third-party tooling).
- Perform vulnerability management: interpret scan output (e.g. Tenable/Nessus, Qualys, Rapid7),

prioritise, and remediate.
- Implement security hardening aligned to CIS Benchmarks, Microsoft Security Baselines, and DISA

STIGs.
- Configure and manage cipher suites, TLS/SSL protocols, and cryptographic settings to remove weak/deprecated protocols.
- Manage certificates, encryption standards, and secure communication across services.
- Support audit, compliance, and penetration-test remediation activities.

VMware / Virtualisation

- Hands-on VMware experience is not mandatory — candidates with strong Windows Server expertise and working knowledge of, or aptitude for, VMware will be considered.
- Design, deploy, configure, and manage VMware ESXi hosts and vCenter environments.
- Manage clusters, HA, DRS, vMotion, Storage vMotion, and resource allocation.
- Perform host lifecycle management including builds, upgrades, and firmware/driver compliance

(vSphere Lifecycle Manager).
- Manage virtual networking (vSwitches, distributed switches, VLANs) and datastore/storage configuration.
- Capacity planning, performance monitoring, troubleshooting, and optimisation of the virtual estate.
- Maintain backup, replication, and disaster recovery capability for virtual workloads.

Qualification, Skills and Experience:

- 8+ years of relevant experience in Windows Server administration, with working knowledge of, or exposure to, VMware virtualisation
- Bachelor’s or master’s degree in computer science, Information Technology Engineering.
- Solid experience in Windows Server administration,



including Active Directory, DNS, DHCP, IIS,

and Group Policy management
- Demonstrable experience in managing enterprise-scale patching cycles and vulnerability remediation across infrastructure environments.
- Practical experience with cipher suite configuration, TLS/SSL hardening, and cryptographic best practices
- Experience implementing and maintaining security baselines and hardening standards, including

CIS Benchmarks, Microsoft Security Baselines, and DISA STIGs.
- Hands-on experience with PowerShell scripting for infrastructure automation, administration, and operational efficiency
- Familiarity with Microsoft Entra ID (Azure AD), Conditional Access, Microsoft Intune, and Modern

Workspace administration

- Understanding of networking fundamentals, including TCP/IP, VLANs, routing, firewalls, and load balancers.
- Exposure to regulated and compliance-driven environments, including ISO 27001, PCI-DSS,

GDPR, and government or defence environments
- Familiarity with infrastructure documentation, operational procedures, and change management processes.
- Good understanding of infrastructure capacity planning, performance monitoring, and continuous keka improvement practice
- Good understanding of incident management, problem management, change management, and

IT service management processes

- Excellent documentation and communication skills, with the ability to clearly document technical solutions, operational procedures, and infrastructure standards
- Strong troubleshooting and problem-solving skills across Windows, VMware, networking,

storage, and other infrastructure layer
- Positive understanding of backup and disaster recovery technologies, such as Veeam, Commvault,

and Zerto.
- Familiarity with infrastructure monitoring and observability tools, such as SolarWinds, PRTG,

VMware Aria Operations, and SCOM
- Familiarity with cloud platforms, including Microsoft Azure, AWS, and VMware Cloud
- Good understanding of storage and SAN technologies, including Fibre Channel, iSCSI, NFS, and platforms such as Pure Storage, NetApp, and Dell EMC.
- Good understanding of infrastructure automation and Infrastructure as Code (IaC) using

PowerCLI, Ansible, and Terraform.
- Good understanding of virtualization technologies, including VMware vSphere/ESXi and Citrix

XenServer administration and management.
- VMware Certified Professional – Data Center Virtualization (VCP-DCV) certification is desirable.

📌 Senior Infrastructure Engineer (Pune)
🏢 Sourcebae
📍 Pune